Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The VHD C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	56	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2584	3120	hv-osbrick-7868	S-1-5-83-1-1862483891-1289583014-768242312-1507640705	4/19/2021 3:54:06 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.99c03181-17b3-4a6d-a760-57a4aaab79c5.vhdx (target 'C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.vhdx').	50	0		4	0	0	-9223372036854775808	55	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	828	1312	hv-osbrick-7868	S-1-5-18	4/19/2021 3:54:00 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.99c03181-17b3-4a6d-a760-57a4aaab79c5.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	54	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3800	3612	hv-osbrick-7868	S-1-5-83-1-1862483891-1289583014-768242312-1507640705	4/19/2021 3:54:00 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-e1589fc3-7865-423d-9e6b-5511312151f4.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	53	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4200	3428	hv-osbrick-7868	S-1-5-83-1-173649993-1143271841-4238434999-3484583224	4/19/2021 3:53:54 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-e1589fc3-7865-423d-9e6b-5511312151f4.vhdx.	51	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4540	hv-osbrick-7868	S-1-5-18	4/19/2021 3:51:33 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-e1589fc3-7865-423d-9e6b-5511312151f4.vhdx (target '').	50	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	3992	hv-osbrick-7868	S-1-5-18	4/19/2021 3:51:29 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-e1589fc3-7865-423d-9e6b-5511312151f4.vhdx.	51	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4732	hv-osbrick-7868	S-1-5-18	4/19/2021 3:51:29 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-e1589fc3-7865-423d-9e6b-5511312151f4.vhdx (target '').	50	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	1592	hv-osbrick-7868	S-1-5-18	4/19/2021 3:51:29 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.99c03181-17b3-4a6d-a760-57a4aaab79c5.vhdx.	51	0		4	0	0	-9223372036854775808	48	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	920	hv-osbrick-7868	S-1-5-18	4/19/2021 3:51:25 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.99c03181-17b3-4a6d-a760-57a4aaab79c5.vhdx (target '').	50	0		4	0	0	-9223372036854775808	47	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	828	3036	hv-osbrick-7868	S-1-5-18	4/19/2021 3:51:25 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	46	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4840	2144	hv-osbrick-7868	S-1-5-83-1-1862483891-1289583014-768242312-1507640705	4/19/2021 3:51:24 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	45	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3888	1956	hv-osbrick-7868	S-1-5-83-1-2556263726-1151177728-1459164813-1322847257	4/19/2021 3:48:47 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	44	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4784	4476	hv-osbrick-7868	S-1-5-83-1-3396518080-1336202936-3667367303-1014363955	4/19/2021 3:46:45 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-beb03dc1-238a-42c2-b054-cdfb3dbb7e94.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	43	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4784	1128	hv-osbrick-7868	S-1-5-83-1-3396518080-1336202936-3667367303-1014363955	4/19/2021 3:46:41 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.vhdx.	51	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1084	hv-osbrick-7868	S-1-5-18	4/19/2021 3:46:02 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.vhdx (target '').	50	0		4	0	0	-9223372036854775808	41	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4620	hv-osbrick-7868	S-1-5-18	4/19/2021 3:46:02 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.vhdx.	51	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1408	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:56 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-d7a34490-229a-49bc-ab67-83020d8e10b2.vhdx (target '').	50	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4148	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:55 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4384	4396	hv-osbrick-7868	S-1-5-83-1-1952423130-1189400788-2678907048-3722603285	4/19/2021 3:45:35 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Vhd Chain for VHD C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.cb807dba-cce1-43c9-a2d4-2d589d4d7932.vhdx is corrupted. The expected LastWriteGUID {65A7170C-AE07-4147-971C-EA7ED2FBE512} ({00000000-0000-0000-0000-000000000000}) did not match the parent's actual LastWriteGUID ({0463FBD5-E785-4344-B9FD-9B20E3A63517}).	7	0		2	0	0	-9223372036854775808	37	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4316	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:33 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Vhd Chain for VHD C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.cb807dba-cce1-43c9-a2d4-2d589d4d7932.vhdx is corrupted. The expected LastWriteGUID {65A7170C-AE07-4147-971C-EA7ED2FBE512} ({00000000-0000-0000-0000-000000000000}) did not match the parent's actual LastWriteGUID ({0463FBD5-E785-4344-B9FD-9B20E3A63517}).	7	0		2	0	0	-9223372036854775808	36	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4316	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:33 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Vhd Chain for VHD C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.cb807dba-cce1-43c9-a2d4-2d589d4d7932.vhdx is corrupted. The expected LastWriteGUID {65A7170C-AE07-4147-971C-EA7ED2FBE512} ({00000000-0000-0000-0000-000000000000}) did not match the parent's actual LastWriteGUID ({0463FBD5-E785-4344-B9FD-9B20E3A63517}).	7	0		2	0	0	-9223372036854775808	35	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4316	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:33 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.cb807dba-cce1-43c9-a2d4-2d589d4d7932.vhdx (target 'C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.vhdx').	50	0		4	0	0	-9223372036854775808	34	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	828	1812	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:30 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.cb807dba-cce1-43c9-a2d4-2d589d4d7932.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	33	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3256	2496	hv-osbrick-7868	S-1-5-83-1-1952423130-1189400788-2678907048-3722603285	4/19/2021 3:45:30 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3972	1308	hv-osbrick-7868	S-1-5-83-1-3396518080-1336202936-3667367303-1014363955	4/19/2021 3:45:28 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-beb03dc1-238a-42c2-b054-cdfb3dbb7e94.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3972	1308	hv-osbrick-7868	S-1-5-83-1-3396518080-1336202936-3667367303-1014363955	4/19/2021 3:45:28 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-4c6faf92-5aaa-42e9-a98c-77ddd0fd0e05.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3976	5084	hv-osbrick-7868	S-1-5-83-1-1754182789-1211908229-4008713918-4039230226	4/19/2021 3:45:24 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-4c6faf92-5aaa-42e9-a98c-77ddd0fd0e05.vhdx.	51	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	2856	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:10 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-4c6faf92-5aaa-42e9-a98c-77ddd0fd0e05.vhdx (target '').	50	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4144	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:06 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-4c6faf92-5aaa-42e9-a98c-77ddd0fd0e05.vhdx.	51	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	748	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:06 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-4c6faf92-5aaa-42e9-a98c-77ddd0fd0e05.vhdx (target '').	50	0		4	0	0	-9223372036854775808	26	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	1592	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:06 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.cb807dba-cce1-43c9-a2d4-2d589d4d7932.vhdx.	51	0		4	0	0	-9223372036854775808	25	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4708	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.cb807dba-cce1-43c9-a2d4-2d589d4d7932.vhdx (target '').	50	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	828	1812	hv-osbrick-7868	S-1-5-18	4/19/2021 3:45:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	948	4220	hv-osbrick-7868	S-1-5-83-1-1952423130-1189400788-2678907048-3722603285	4/19/2021 3:45:00 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.vhdx.	51	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	512	hv-osbrick-7868	S-1-5-18	4/19/2021 3:44:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.vhdx (target '').	50	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4180	hv-osbrick-7868	S-1-5-18	4/19/2021 3:44:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.vhdx.	51	0		4	0	0	-9223372036854775808	20	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3832	hv-osbrick-7868	S-1-5-18	4/19/2021 3:44:38 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-1ca82e5b-e7d9-4498-b6a0-0311d0a97dfd.vhdx (target '').	50	0		4	0	0	-9223372036854775808	19	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	2564	hv-osbrick-7868	S-1-5-18	4/19/2021 3:44:38 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-c21747d9-ef00-4af0-bf30-da53cf9a965e.1d8ee526-8b5e-4b10-adae-bc4b0647bf0c.vhdx (target 'C:\smbshare\volume-c21747d9-ef00-4af0-bf30-da53cf9a965e.vhdx').	50	0		4	0	0	-9223372036854775808	18	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	3992	hv-osbrick-7868	S-1-5-18	4/19/2021 3:44:23 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-aafb2fa0-ab08-4c88-9eee-187b4db2d5e8.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1124	604	hv-osbrick-7868	S-1-5-83-1-3630713041-1311993188-4257868223-986797590	4/19/2021 3:44:19 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-aafb2fa0-ab08-4c88-9eee-187b4db2d5e8.vhdx.	51	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4256	hv-osbrick-7868	S-1-5-18	4/19/2021 3:44:03 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-aafb2fa0-ab08-4c88-9eee-187b4db2d5e8.vhdx (target '').	50	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	776	hv-osbrick-7868	S-1-5-18	4/19/2021 3:44:00 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-aafb2fa0-ab08-4c88-9eee-187b4db2d5e8.vhdx.	51	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3904	hv-osbrick-7868	S-1-5-18	4/19/2021 3:44:00 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-aafb2fa0-ab08-4c88-9eee-187b4db2d5e8.vhdx (target '').	50	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4772	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:59 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-c21747d9-ef00-4af0-bf30-da53cf9a965e.1d8ee526-8b5e-4b10-adae-bc4b0647bf0c.vhdx.	51	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4288	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:55 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-beb03dc1-238a-42c2-b054-cdfb3dbb7e94.vhdx.	51	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	364	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:54 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-c21747d9-ef00-4af0-bf30-da53cf9a965e.1d8ee526-8b5e-4b10-adae-bc4b0647bf0c.vhdx (target '').	50	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4492	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:54 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-beb03dc1-238a-42c2-b054-cdfb3dbb7e94.vhdx (target '').	50	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	508	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:54 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-c21747d9-ef00-4af0-bf30-da53cf9a965e.vhdx.	51	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1180	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:53 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-c21747d9-ef00-4af0-bf30-da53cf9a965e.vhdx (target '').	50	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	4144	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:53 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-c21747d9-ef00-4af0-bf30-da53cf9a965e.vhdx.	51	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4128	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:48 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-c21747d9-ef00-4af0-bf30-da53cf9a965e.vhdx (target '').	50	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	3584	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:48 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4856	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:40 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	828	4576	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:40 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4844	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:40 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	828	4576	hv-osbrick-7868	S-1-5-18	4/19/2021 3:43:39 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]