Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The VHD C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	53	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5116	4452	hv-osbrick-7912	S-1-5-83-1-769744744-1215592207-1464336284-2439533942	5/13/2021 6:40:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.fa2c22b5-436b-4c14-b388-4892faa9813d.vhdx (target 'C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.vhdx').	50	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5088	4648	hv-osbrick-7912	S-1-5-18	5/13/2021 6:40:38 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.fa2c22b5-436b-4c14-b388-4892faa9813d.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3668	2056	hv-osbrick-7912	S-1-5-83-1-769744744-1215592207-1464336284-2439533942	5/13/2021 6:40:38 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-dbc1d2e0-0de5-4fc1-acdb-0042ee40d30b.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3772	2968	hv-osbrick-7912	S-1-5-83-1-2366532840-1336093248-3369729184-2867405714	5/13/2021 6:40:32 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-dbc1d2e0-0de5-4fc1-acdb-0042ee40d30b.vhdx.	51	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1216	hv-osbrick-7912	S-1-5-18	5/13/2021 6:38:46 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-dbc1d2e0-0de5-4fc1-acdb-0042ee40d30b.vhdx (target '').	50	0		4	0	0	-9223372036854775808	48	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	4312	hv-osbrick-7912	S-1-5-18	5/13/2021 6:38:44 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-dbc1d2e0-0de5-4fc1-acdb-0042ee40d30b.vhdx.	51	0		4	0	0	-9223372036854775808	47	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1572	hv-osbrick-7912	S-1-5-18	5/13/2021 6:38:44 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-dbc1d2e0-0de5-4fc1-acdb-0042ee40d30b.vhdx (target '').	50	0		4	0	0	-9223372036854775808	46	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	2340	hv-osbrick-7912	S-1-5-18	5/13/2021 6:38:44 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.fa2c22b5-436b-4c14-b388-4892faa9813d.vhdx.	51	0		4	0	0	-9223372036854775808	45	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1356	hv-osbrick-7912	S-1-5-18	5/13/2021 6:38:42 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.fa2c22b5-436b-4c14-b388-4892faa9813d.vhdx (target '').	50	0		4	0	0	-9223372036854775808	44	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5088	4424	hv-osbrick-7912	S-1-5-18	5/13/2021 6:38:42 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	43	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1580	2924	hv-osbrick-7912	S-1-5-83-1-769744744-1215592207-1464336284-2439533942	5/13/2021 6:38:42 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3120	4036	hv-osbrick-7912	S-1-5-83-1-1757179348-1088328414-991741322-1378881182	5/13/2021 6:36:56 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	41	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4428	4548	hv-osbrick-7912	S-1-5-83-1-2564028692-1135462365-3672348815-1599593509	5/13/2021 6:34:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.vhdx.	51	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1296	hv-osbrick-7912	S-1-5-18	5/13/2021 6:34:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.vhdx (target '').	50	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	2648	hv-osbrick-7912	S-1-5-18	5/13/2021 6:34:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.vhdx.	51	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	2280	hv-osbrick-7912	S-1-5-18	5/13/2021 6:34:41 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-4218d4d1-680a-4740-af66-ac6d2de99e4e.vhdx (target '').	50	0		4	0	0	-9223372036854775808	37	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	2340	hv-osbrick-7912	S-1-5-18	5/13/2021 6:34:41 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-8db32a6a-e4b3-4d26-9dba-b9a6035c9eb7.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	36	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4428	3744	hv-osbrick-7912	S-1-5-83-1-2564028692-1135462365-3672348815-1599593509	5/13/2021 6:34:39 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	35	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1176	1700	hv-osbrick-7912	S-1-5-83-1-412389542-1236547904-3675233711-3208912882	5/13/2021 6:34:23 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.d31e63b6-9ed0-4d20-854a-b59c5cb7362e.vhdx (target 'C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.vhdx').	50	0		4	0	0	-9223372036854775808	34	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5088	4468	hv-osbrick-7912	S-1-5-18	5/13/2021 6:34:19 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.d31e63b6-9ed0-4d20-854a-b59c5cb7362e.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	33	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2080	4444	hv-osbrick-7912	S-1-5-83-1-412389542-1236547904-3675233711-3208912882	5/13/2021 6:34:19 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-68997e2b-550f-46b7-8a3d-28a26b0955f6.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3840	1684	hv-osbrick-7912	S-1-5-83-1-3055985856-1325356596-2429642925-2061353769	5/13/2021 6:34:15 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-68997e2b-550f-46b7-8a3d-28a26b0955f6.vhdx.	51	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1732	hv-osbrick-7912	S-1-5-18	5/13/2021 6:34:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-68997e2b-550f-46b7-8a3d-28a26b0955f6.vhdx (target '').	50	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	4472	hv-osbrick-7912	S-1-5-18	5/13/2021 6:34:02 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-68997e2b-550f-46b7-8a3d-28a26b0955f6.vhdx.	51	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3184	hv-osbrick-7912	S-1-5-18	5/13/2021 6:34:02 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-68997e2b-550f-46b7-8a3d-28a26b0955f6.vhdx (target '').	50	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	4312	hv-osbrick-7912	S-1-5-18	5/13/2021 6:34:02 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.d31e63b6-9ed0-4d20-854a-b59c5cb7362e.vhdx.	51	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	2816	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:58 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.d31e63b6-9ed0-4d20-854a-b59c5cb7362e.vhdx (target '').	50	0		4	0	0	-9223372036854775808	26	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5088	3604	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:58 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	25	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4964	1236	hv-osbrick-7912	S-1-5-83-1-412389542-1236547904-3675233711-3208912882	5/13/2021 6:33:58 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4276	3152	hv-osbrick-7912	S-1-5-83-1-2564028692-1135462365-3672348815-1599593509	5/13/2021 6:33:54 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-8db32a6a-e4b3-4d26-9dba-b9a6035c9eb7.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4276	3152	hv-osbrick-7912	S-1-5-83-1-2564028692-1135462365-3672348815-1599593509	5/13/2021 6:33:54 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.vhdx.	51	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	5076	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:42 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.vhdx (target '').	50	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	2340	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:42 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.vhdx.	51	0		4	0	0	-9223372036854775808	20	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	2092	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:40 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-dbc539bd-c798-4440-bcd5-1376678ca3d2.vhdx (target '').	50	0		4	0	0	-9223372036854775808	19	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	2648	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:40 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-25db746f-11bc-40de-a261-b8a2a82fb562.0c59ad15-84fb-43eb-a5f3-3ec0229f3257.vhdx (target 'C:\smbshare\volume-25db746f-11bc-40de-a261-b8a2a82fb562.vhdx').	50	0		4	0	0	-9223372036854775808	18	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	1308	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:25 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-8142596e-55d1-4b9d-bea3-7ae468aeb8f3.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1924	4340	hv-osbrick-7912	S-1-5-83-1-1170498716-1103406000-4162385072-310519181	5/13/2021 6:33:22 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-8142596e-55d1-4b9d-bea3-7ae468aeb8f3.vhdx.	51	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1416	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:09 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-8142596e-55d1-4b9d-bea3-7ae468aeb8f3.vhdx (target '').	50	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	1140	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:09 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-8142596e-55d1-4b9d-bea3-7ae468aeb8f3.vhdx.	51	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	2076	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:09 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-8142596e-55d1-4b9d-bea3-7ae468aeb8f3.vhdx (target '').	50	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	1768	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:09 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-25db746f-11bc-40de-a261-b8a2a82fb562.0c59ad15-84fb-43eb-a5f3-3ec0229f3257.vhdx.	51	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3380	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-25db746f-11bc-40de-a261-b8a2a82fb562.0c59ad15-84fb-43eb-a5f3-3ec0229f3257.vhdx (target '').	50	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	1420	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-25db746f-11bc-40de-a261-b8a2a82fb562.vhdx.	51	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4432	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:03 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-25db746f-11bc-40de-a261-b8a2a82fb562.vhdx (target '').	50	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	3664	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:03 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-25db746f-11bc-40de-a261-b8a2a82fb562.vhdx.	51	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4036	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-25db746f-11bc-40de-a261-b8a2a82fb562.vhdx (target '').	50	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	1156	hv-osbrick-7912	S-1-5-18	5/13/2021 6:33:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-8db32a6a-e4b3-4d26-9dba-b9a6035c9eb7.vhdx.	51	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1456	hv-osbrick-7912	S-1-5-18	5/13/2021 6:32:55 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-8db32a6a-e4b3-4d26-9dba-b9a6035c9eb7.vhdx (target '').	50	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4748	3012	hv-osbrick-7912	S-1-5-18	5/13/2021 6:32:55 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1984	hv-osbrick-7912	S-1-5-18	5/13/2021 6:32:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5088	4236	hv-osbrick-7912	S-1-5-18	5/13/2021 6:32:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1296	hv-osbrick-7912	S-1-5-18	5/13/2021 6:32:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5088	3992	hv-osbrick-7912	S-1-5-18	5/13/2021 6:32:43 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]