Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The VHD C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	53	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3404	2444	hv-osbrick-8236	S-1-5-83-1-3528706762-1233891164-2627965059-2093617911	2/17/2022 12:21:23 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.458679b2-b9b4-4800-ad90-8b15e734ead7.vhdx (target 'C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.vhdx').	50	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4536	4712	hv-osbrick-8236	S-1-5-18	2/17/2022 12:21:18 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.458679b2-b9b4-4800-ad90-8b15e734ead7.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3620	4416	hv-osbrick-8236	S-1-5-83-1-3528706762-1233891164-2627965059-2093617911	2/17/2022 12:21:18 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-c6b3c972-783f-4e55-9376-c066ec43a7b7.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3712	3496	hv-osbrick-8236	S-1-5-83-1-3499883216-1215582079-3695188389-3452550935	2/17/2022 12:21:14 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-c6b3c972-783f-4e55-9376-c066ec43a7b7.vhdx.	51	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4488	hv-osbrick-8236	S-1-5-18	2/17/2022 12:19:32 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-c6b3c972-783f-4e55-9376-c066ec43a7b7.vhdx (target '').	50	0		4	0	0	-9223372036854775808	48	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	3180	hv-osbrick-8236	S-1-5-18	2/17/2022 12:19:31 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-c6b3c972-783f-4e55-9376-c066ec43a7b7.vhdx.	51	0		4	0	0	-9223372036854775808	47	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1144	hv-osbrick-8236	S-1-5-18	2/17/2022 12:19:31 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-c6b3c972-783f-4e55-9376-c066ec43a7b7.vhdx (target '').	50	0		4	0	0	-9223372036854775808	46	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	4988	hv-osbrick-8236	S-1-5-18	2/17/2022 12:19:31 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.458679b2-b9b4-4800-ad90-8b15e734ead7.vhdx.	51	0		4	0	0	-9223372036854775808	45	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	5036	hv-osbrick-8236	S-1-5-18	2/17/2022 12:19:29 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.458679b2-b9b4-4800-ad90-8b15e734ead7.vhdx (target '').	50	0		4	0	0	-9223372036854775808	44	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4536	1312	hv-osbrick-8236	S-1-5-18	2/17/2022 12:19:29 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	43	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	376	360	hv-osbrick-8236	S-1-5-83-1-3528706762-1233891164-2627965059-2093617911	2/17/2022 12:19:28 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3700	1960	hv-osbrick-8236	S-1-5-83-1-1599057614-1179214722-2270049428-621039954	2/17/2022 12:17:45 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	41	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5100	4392	hv-osbrick-8236	S-1-5-83-1-883272634-1090863875-2352787862-105964682	2/17/2022 12:15:37 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.vhdx.	51	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4500	hv-osbrick-8236	S-1-5-18	2/17/2022 12:15:35 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.vhdx (target '').	50	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	3900	hv-osbrick-8236	S-1-5-18	2/17/2022 12:15:35 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-6c91302c-53bc-43bb-a821-7a6a2b971440.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5100	1108	hv-osbrick-8236	S-1-5-83-1-883272634-1090863875-2352787862-105964682	2/17/2022 12:15:33 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.vhdx.	51	0		4	0	0	-9223372036854775808	37	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3688	hv-osbrick-8236	S-1-5-18	2/17/2022 12:15:33 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-ecc96812-5f15-41cb-b4ea-688a3027d3c7.vhdx (target '').	50	0		4	0	0	-9223372036854775808	36	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	4176	hv-osbrick-8236	S-1-5-18	2/17/2022 12:15:33 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	35	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5044	3068	hv-osbrick-8236	S-1-5-83-1-389529283-1306597930-1060315016-1483515204	2/17/2022 12:15:19 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.7201021a-e85c-4dcd-9474-f2c6959d61d9.vhdx (target 'C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.vhdx').	50	0		4	0	0	-9223372036854775808	34	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4536	4840	hv-osbrick-8236	S-1-5-18	2/17/2022 12:15:16 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.7201021a-e85c-4dcd-9474-f2c6959d61d9.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	33	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3652	1692	hv-osbrick-8236	S-1-5-83-1-389529283-1306597930-1060315016-1483515204	2/17/2022 12:15:15 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-3f222b1c-f0f5-4231-a9ad-493438dd5d0a.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1116	2436	hv-osbrick-8236	S-1-5-83-1-1722335689-1251626723-2668007570-2146514865	2/17/2022 12:15:12 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-3f222b1c-f0f5-4231-a9ad-493438dd5d0a.vhdx.	51	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3392	hv-osbrick-8236	S-1-5-18	2/17/2022 12:15:01 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-3f222b1c-f0f5-4231-a9ad-493438dd5d0a.vhdx (target '').	50	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	3180	hv-osbrick-8236	S-1-5-18	2/17/2022 12:15:00 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-3f222b1c-f0f5-4231-a9ad-493438dd5d0a.vhdx.	51	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4204	hv-osbrick-8236	S-1-5-18	2/17/2022 12:15:00 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-3f222b1c-f0f5-4231-a9ad-493438dd5d0a.vhdx (target '').	50	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	3384	hv-osbrick-8236	S-1-5-18	2/17/2022 12:15:00 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.7201021a-e85c-4dcd-9474-f2c6959d61d9.vhdx.	51	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3964	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:57 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.7201021a-e85c-4dcd-9474-f2c6959d61d9.vhdx (target '').	50	0		4	0	0	-9223372036854775808	26	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4536	3340	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:57 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	25	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4768	4216	hv-osbrick-8236	S-1-5-83-1-389529283-1306597930-1060315016-1483515204	2/17/2022 12:14:56 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4128	4912	hv-osbrick-8236	S-1-5-83-1-883272634-1090863875-2352787862-105964682	2/17/2022 12:14:48 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-6c91302c-53bc-43bb-a821-7a6a2b971440.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4128	4912	hv-osbrick-8236	S-1-5-83-1-883272634-1090863875-2352787862-105964682	2/17/2022 12:14:48 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.vhdx.	51	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	692	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:44 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.vhdx (target '').	50	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	740	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:44 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.vhdx.	51	0		4	0	0	-9223372036854775808	20	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4800	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:42 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-01902e18-bd0a-4eb3-be70-0f93413b0cae.vhdx (target '').	50	0		4	0	0	-9223372036854775808	19	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	540	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:42 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-ec02b4b0-7151-4d15-81e5-097463493d4b.a3a31cc1-3618-4c8f-864b-51d08ae067f6.vhdx (target 'C:\smbshare\volume-ec02b4b0-7151-4d15-81e5-097463493d4b.vhdx').	50	0		4	0	0	-9223372036854775808	18	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	540	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:29 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-5f6d7412-cf93-4bbe-99e6-f25750833004.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5112	1120	hv-osbrick-8236	S-1-5-83-1-1023947699-1091237470-2604341937-251652884	2/17/2022 12:14:27 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-5f6d7412-cf93-4bbe-99e6-f25750833004.vhdx.	51	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	880	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:15 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-5f6d7412-cf93-4bbe-99e6-f25750833004.vhdx (target '').	50	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	1788	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:14 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-5f6d7412-cf93-4bbe-99e6-f25750833004.vhdx.	51	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4804	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:14 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-5f6d7412-cf93-4bbe-99e6-f25750833004.vhdx (target '').	50	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	3748	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:14 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-ec02b4b0-7151-4d15-81e5-097463493d4b.a3a31cc1-3618-4c8f-864b-51d08ae067f6.vhdx.	51	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3472	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:11 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-ec02b4b0-7151-4d15-81e5-097463493d4b.a3a31cc1-3618-4c8f-864b-51d08ae067f6.vhdx (target '').	50	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	3900	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:11 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-ec02b4b0-7151-4d15-81e5-097463493d4b.vhdx.	51	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1160	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:10 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-ec02b4b0-7151-4d15-81e5-097463493d4b.vhdx (target '').	50	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	2128	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:10 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-ec02b4b0-7151-4d15-81e5-097463493d4b.vhdx.	51	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	2000	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:08 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-ec02b4b0-7151-4d15-81e5-097463493d4b.vhdx (target '').	50	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	2308	hv-osbrick-8236	S-1-5-18	2/17/2022 12:14:08 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-6c91302c-53bc-43bb-a821-7a6a2b971440.vhdx.	51	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3948	hv-osbrick-8236	S-1-5-18	2/17/2022 12:13:59 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-6c91302c-53bc-43bb-a821-7a6a2b971440.vhdx (target '').	50	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2020	2200	hv-osbrick-8236	S-1-5-18	2/17/2022 12:13:59 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1012	hv-osbrick-8236	S-1-5-18	2/17/2022 12:13:48 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4536	3488	hv-osbrick-8236	S-1-5-18	2/17/2022 12:13:48 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	2088	hv-osbrick-8236	S-1-5-18	2/17/2022 12:13:48 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4536	4116	hv-osbrick-8236	S-1-5-18	2/17/2022 12:13:48 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]