# events_persisted

sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:38.3206653Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":126},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"ts_usb_hub_enumerator\\umb\\2&30d3618&0&ts_usb_hub","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:38.3206895Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":127},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"umb\\umb\\1&841921d&0&rdcamera_bus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:38.3207136Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":128},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"umb\\umb\\1&841921d&0&rdcamera_bus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:38.3207243Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":129},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"umb\\umb\\1&841921d&0&terminput_bus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:38.3207477Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":130},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"umb\\umb\\1&841921d&0&terminput_bus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:38.3207571Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":131},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"umb\\umb\\1&841921d&0&tsbus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:38.3207806Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":132},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"umb\\umb\\1&841921d&0&tsbus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:38.3207913Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":133},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"umb\\umb\\1&841921d&0&ts_usb_hub_enumerator","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:38.3208132Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":134},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"umb\\umb\\1&841921d&0&ts_usb_hub_enumerator","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceApplicationFileAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceApplicationFileAdd","time":"2021-08-18T01:06:38.3208841Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":135},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceApplicationFile_21H1","objectInstanceId":"chrome.exe|84040b46ffb049b9","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsAv":"","AvDisplayName":"","HasUpgradeExe":"","ResolveAttempted":"","SdbEntries":[{"MigXmlName":"","MigXmlType":"","ReinstallUpgradeMessage":"","SdbAppGuid":"{c6914c3b-2983-4424-ae4c-9d8db8856722}","SdbAppName":"Chromium","SdbAppVendor":"ChromeVendors","SdbUxBlocktypeOverride":"SDB_UX_BLOCKTYPE_OVERRIDE_MIG_FIXED","SdbBlockType":"","SdbEntryGuid":"{c64cf957-ae9e-47c1-8a81-f1e7c448a414}","MigShimName":"ChromeFontCacheShim","MigShimCommand":"\\user data\\default\\chromedwritefontcache","SdbAppraiserData":""}],"CompatModelIndex":"","HasCitData":"FALSE"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionApplicationFileAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionApplicationFileAdd","time":"2021-08-18T01:06:38.3209501Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":136},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionApplicationFile_21H1","objectInstanceId":"chrome.exe|84040b46ffb049b9","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockAlreadyInbox":"FALSE","MigApplication":"FALSE","HardBlock":"FALSE","SoftBlock":"FALSE","HasUxBlockOverride":"FALSE","NeedsDismissAction":"FALSE","NeedsUninstallAction":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsInstallPostUpgradeData":"FALSE","NeedsNotifyPostUpgradeData":"FALSE","NeedsReinstallPostUpgradeData":"FALSE","BlockingApplication":"FALSE","SdbBlockUpgrade":"FALSE","SdbBlockUpgradeCanReinstall":"FALSE","SdbBlockUpgradeUntilUpdate":"FALSE","SdbReinstallUpgrade":"FALSE","SdbReinstallUpgradeWarn":"FALSE","MigRemoval":"FALSE"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount","time":"2021-08-18T01:06:38.3220861Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":137},"metadata":{"privTags":16777216},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","DatasourceApplicationFile_21H1":"2","DecisionApplicationFile_21H1":"2","DataSourceMatchingInfoBlock_21H1":"0","DecisionMatchingInfoBlock_21H1":"0","DataSourceMatchingInfoPassive_21H1":"10","DecisionMatchingInfoPassive_21H1":"10","DataSourceMatchingInfoPostUpgrade_21H1":"0","DecisionMatchingInfoPostUpgrade_21H1":"0","DecisionMediaCenter_21H1":"1","Wmdrm_21H1":"1","DatasourceDevicePnp_21H1":"63","DecisionDevicePnp_21H1":"63","DatasourceDriverPackage_21H1":"0","DecisionDriverPackage_21H1":"0","DatasourceSystemBios_21H1":"1","DecisionSystemBios_21H1":"1","DecisionTest_21H1":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:38.3541079Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":138},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"umb\\umb\\1&841921d&0&tsbus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:39.3352362Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":139},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"umb\\umb\\1&841921d&0&tsbus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.SystemMemoryAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.SystemMemoryAdd","time":"2021-08-18T01:06:39.3361049Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":140},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"SystemMemory","objectInstanceId":"Memory","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","ramKB":"8388148","pageFile":"9931640832","ram":"8589463552","virtual":"140737488224256","virtualKB":"137438953344","MemoryRequirementViolated":"FALSE","Blocking":"FALSE"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.InventoryApplicationFileAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.InventoryApplicationFileAdd","time":"2021-08-18T01:06:40.3355965Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":141},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplicationFile","objectInstanceId":"chrome.exe|84040b46ffb049b9","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","ProgramId":"00004bf56f025faab27c464b8efdfd90c8a60000ffff","BoeProgramId":"00064bf56f025faab27c464b8efdfd90c8a600000904","BinaryType":"pe64_amd64","Name":"chrome.exe","CompanyName":"Google LLC","ProductName":"Google Chrome","ProductVersion":"92.0.4515.159","LinkDate":"08/13/2021 18:16:48","BinProductVersion":"92.0.4515.159","BinFileVersion":"92.0.4515.159","FileVersion":"92.0.4515.159","LowerCaseLongPath":"%programfiles%\\google\\chrome\\application\\chrome.exe","FileId":"0000ba7185677b750c8025ffc2b2406960fe63261402","Size":"0x0000000000254558","IsAv":"","AvDisplayName":"","AvProductState":"","HasUpgradeExe":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:40.3356125Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":142},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"umb\\umb\\1&841921d&0&ts_usb_hub_enumerator","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:40.3357652Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":143},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"umb\\umb\\1&841921d&0&ts_usb_hub_enumerator","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount","time":"2021-08-18T01:06:40.3373865Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":144},"metadata":{"privTags":16777216},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","InventoryApplicationFile":"2","InventoryMediaCenter":"1","InventoryLanguagePack":"1","InventoryUplevelDriverPackage":"0","InventorySystemBios":"1","SystemProcessorCompareExchange":"1","SystemProcessorLahfSahf":"1","SystemMemory":"1","SystemProcessorPrefetchW":"1","SystemProcessorSse2":"1","SystemProcessorNx":"1","SystemWlan":"1","SystemWim":"1","SystemTouch":"1","SystemWindowsActivationStatus":"1","InventoryTest":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceApplicationFileAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceApplicationFileAdd","time":"2021-08-18T01:06:40.3375622Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":145},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceApplicationFile_21H2","objectInstanceId":"chrome.exe|84040b46ffb049b9","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsAv":"","AvDisplayName":"","HasUpgradeExe":"","ResolveAttempted":"","SdbEntries":[{"MigXmlName":"","MigXmlType":"","ReinstallUpgradeMessage":"","SdbAppGuid":"{c6914c3b-2983-4424-ae4c-9d8db8856722}","SdbAppName":"Chromium","SdbAppVendor":"ChromeVendors","SdbUxBlocktypeOverride":"SDB_UX_BLOCKTYPE_OVERRIDE_MIG_FIXED","SdbBlockType":"","SdbEntryGuid":"{c64cf957-ae9e-47c1-8a81-f1e7c448a414}","MigShimName":"ChromeFontCacheShim","MigShimCommand":"\\user data\\default\\chromedwritefontcache","SdbAppraiserData":""}],"CompatModelIndex":"","HasCitData":"FALSE"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionApplicationFileAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionApplicationFileAdd","time":"2021-08-18T01:06:40.3376558Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":146},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionApplicationFile_21H2","objectInstanceId":"chrome.exe|84040b46ffb049b9","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockAlreadyInbox":"FALSE","MigApplication":"FALSE","HardBlock":"FALSE","SoftBlock":"FALSE","HasUxBlockOverride":"FALSE","NeedsDismissAction":"FALSE","NeedsUninstallAction":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsInstallPostUpgradeData":"FALSE","NeedsNotifyPostUpgradeData":"FALSE","NeedsReinstallPostUpgradeData":"FALSE","BlockingApplication":"FALSE","SdbBlockUpgrade":"FALSE","SdbBlockUpgradeCanReinstall":"FALSE","SdbBlockUpgradeUntilUpdate":"FALSE","SdbReinstallUpgrade":"FALSE","SdbReinstallUpgradeWarn":"FALSE","MigRemoval":"FALSE"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount","time":"2021-08-18T01:06:40.3379635Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":147},"metadata":{"privTags":16777216},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","DatasourceApplicationFile_21H2":"2","DecisionApplicationFile_21H2":"2","DataSourceMatchingInfoBlock_21H2":"0","DecisionMatchingInfoBlock_21H2":"0","DataSourceMatchingInfoPassive_21H2":"10","DecisionMatchingInfoPassive_21H2":"10","DataSourceMatchingInfoPostUpgrade_21H2":"0","DecisionMatchingInfoPostUpgrade_21H2":"0","DecisionMediaCenter_21H2":"1","Wmdrm_21H2":"1","DatasourceDevicePnp_21H2":"63","DecisionDevicePnp_21H2":"63","DatasourceDriverPackage_21H2":"0","DecisionDriverPackage_21H2":"0","DatasourceSystemBios_21H2":"1","DecisionSystemBios_21H2":"1","DecisionTest_21H2":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.TelemetryRunHealth
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.TelemetryRunHealth","time":"2021-08-18T01:06:43.2231335Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":148},"metadata":{"f":{"Time":9,"DeadlineDate":5,"RunDate":5,"RunResult":2},"privTags":16777216},"mscv":{"cV":"dLKWjsKqz0GI623T.1.0","cV":"dLKWjsKqz0GI623T.1.8"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Time":"2021-08-18T01:06:43.1940000Z","PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","AppraiserVersion":"10019645","AppraiserBranch":"WinBuild","AppraiserProcess":"CompatTelRunner.exe","DeadlineDate":131997384000000000,"RunDate":132737223852727553,"AppraiserDataVersion":2502,"InboxDataVersion":2450,"RunAppraiser":true,"RunGeneralTel":true,"VerboseMode":false,"EnterpriseRun":false,"SendingUtc":true,"ThrottlingUtc":true,"PerfBackoff":false,"PerfBackoffInsurance":false,"StoreHandleIsNotNull":false,"AuxInitial":true,"AuxFinal":false,"TelementrySent":true,"IndicatorsWritten":true,"RunOnline":true,"FullSync":false,"InventoryFullSync":false,"CountCustomSdbs":0,"CustomSdbGuids":"","WhyFullSyncWithoutTablePrefix":"","RunResult":0,"ScheduledUploadDay":33}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.AmiTelCacheChecksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.AmiTelCacheChecksum","time":"2021-08-18T01:06:54.4575364Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":149},"metadata":{"privTags":16777216},"mscv":{"cV":"23WHWmyCe0KUDoXv.0","cV":"dLKWjsKqz0GI623T.7.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":120},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","DriverPackageExtended":"0","InventoryApplication":"84","InventoryApplicationDriver":"","InventoryApplicationFramework":"0","InventoryDeviceContainer":"11","InventoryDeviceInterface":"1","InventoryDeviceMediaClass":"1","InventoryDevicePnp":"63","InventoryDriverBinary":"361","InventoryDriverPackage":"0","InventoryDeviceUsbHubClass":"1","InventoryMiscellaneousOfficeAddIn":"0","InventoryMiscellaneousOfficeIdentifiers":"1","InventoryMiscellaneousOfficeIESettings":"1","InventoryMiscellaneousOfficeInsights":"0","InventoryMiscellaneousOfficeSettings":"1","InventoryMiscellaneousOfficeProducts":"1","InventoryMiscellaneousOfficeVBA":"0","InventoryMiscellaneousOfficeVBARuleViolations":"0"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T01:14:11.3781491Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":150},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T00:44:11.3631933Z","HeartBeatSequenceNumber":31,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":7,"DecodingDroppedCount":4,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":13,"EventsUploaded":21,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":16024,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":1,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":139,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":128,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_Aria_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_Aria_5","time":"2021-08-18T01:14:11.3821744Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1009779272,"epoch":"1107239","seq":151},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-17T11:58:08.0579933Z","HeartBeatSequenceNumber":2,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":0,"EventsUploaded":0,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":0,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":8,"PrivacyBlockedCount":0}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T01:44:11.4192623Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":152},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T01:14:11.3781491Z","HeartBeatSequenceNumber":32,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":0,"EventsUploaded":0,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":0,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":2,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":128,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T02:14:11.4195327Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":153},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T01:44:11.4192623Z","HeartBeatSequenceNumber":33,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":0,"EventsUploaded":0,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":0,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":128,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T02:44:11.4343227Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":154},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T02:14:11.4195327Z","HeartBeatSequenceNumber":34,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":0,"EventsUploaded":0,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":0,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":128,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T03:14:11.4506549Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":155},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T02:44:11.4343227Z","HeartBeatSequenceNumber":35,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":0,"EventsUploaded":0,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":0,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":128,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig
logging_binary_name: ntoskrnl.exe
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig","time":"2021-08-18T03:18:55.0980872Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1042285128,"epoch":"1107239","seq":156},"metadata":{"f":{"RebootRequiredReason":5,"InstallDate":9},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Legacy":false,"DeviceInstanceId":"TERMINPUT_BUS\\UMB\\2&2c22bcc9&0&Session2Keyboard0","DriverFlightIds":"","FirstHardwareId":"TS_INPT\\TS_KBD","LastCompatibleId":"TI_COMPAT_DEVICE","ClassGuid":"{4d36e96b-e325-11ce-bfc1-08002be10318}","DriverInfName":"termkbd.inf","DriverProvider":"Microsoft","DriverDate":"04/21/2009","DriverVersion":"10.0.19041.1","DriverSubmissionId":"","ExtensionDrivers":"","InboxDriver":1,"SetupMode":0,"NeedReboot":0,"RebootRequiredReason":0,"StatusCode":0,"InstallDate":"2021-08-18T03:18:57.4575891Z"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig
logging_binary_name: ntoskrnl.exe
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig","time":"2021-08-18T03:18:55.1042488Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1042285128,"epoch":"1107239","seq":157},"metadata":{"f":{"RebootRequiredReason":5,"InstallDate":9},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Legacy":false,"DeviceInstanceId":"TERMINPUT_BUS\\UMB\\2&2c22bcc9&0&Session2Mouse0","DriverFlightIds":"","FirstHardwareId":"TS_INPT\\TS_MOU","LastCompatibleId":"TI_COMPAT_DEVICE","ClassGuid":"{4d36e96f-e325-11ce-bfc1-08002be10318}","DriverInfName":"termmou.inf","DriverProvider":"Microsoft","DriverDate":"04/21/2009","DriverVersion":"10.0.19041.1","DriverSubmissionId":"","ExtensionDrivers":"","InboxDriver":1,"SetupMode":0,"NeedReboot":0,"RebootRequiredReason":0,"StatusCode":0,"InstallDate":"2021-08-18T03:18:57.4738735Z"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig
logging_binary_name: ntoskrnl.exe
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig","time":"2021-08-18T03:18:55.2159110Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1042285128,"epoch":"1107239","seq":158},"metadata":{"f":{"RebootRequiredReason":5,"InstallDate":9},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Legacy":false,"DeviceInstanceId":"SWD\\RemoteDisplayEnum\\RdpIdd_IndirectDisplay&SessionId_0002","DriverFlightIds":"","FirstHardwareId":"RdpIdd_IndirectDisplay","LastCompatibleId":"SWD\\Generic","ClassGuid":"{4d36e968-e325-11ce-bfc1-08002be10318}","DriverInfName":"rdpidd.inf","DriverProvider":"Microsoft","DriverDate":"06/21/2006","DriverVersion":"10.0.19041.662","DriverSubmissionId":"","ExtensionDrivers":"","InboxDriver":1,"SetupMode":0,"NeedReboot":0,"RebootRequiredReason":0,"StatusCode":0,"InstallDate":"2021-08-18T03:18:57.5825988Z"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-18T03:18:55.2261262Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1008730696,"epoch":"1107239","seq":159},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_MOUSE","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":9295859,"deviceTimeSinceLastReadEndMs":9295859,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-18T03:18:55.2273135Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1008730696,"epoch":"1107239","seq":160},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_KEYBOARD","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":9295859,"deviceTimeSinceLastReadEndMs":9295859,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-18T03:18:55.3526300Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-840A-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1107239","seq":161},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":11,"aiSeqId":6,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":1238856,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":0,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":19971}}


sid: S-1-5-90-0-2
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-18T03:18:55.4867005Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":742392392,"epoch":"1107239","seq":162},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00006745b380e62b60d629d8ca49191ff1d73448de64!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":310},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:FF7EF2A6-397B-0761-AD31-461D99B373D2"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig
logging_binary_name: ntoskrnl.exe
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig","time":"2021-08-18T03:18:55.5479067Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1107239","seq":163},"metadata":{"f":{"RebootRequiredReason":5,"InstallDate":9},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Legacy":false,"DeviceInstanceId":"DISPLAY\\Default_Monitor\\1&1f0c3c2f&0&UID256","DriverFlightIds":"","FirstHardwareId":"MONITOR\\Default_Monitor","LastCompatibleId":"*PNP09FF","ClassGuid":"{4d36e96e-e325-11ce-bfc1-08002be10318}","DriverInfName":"monitor.inf","DriverProvider":"Microsoft","DriverDate":"06/21/2006","DriverVersion":"10.0.19041.1151","DriverSubmissionId":"","ExtensionDrivers":"","InboxDriver":1,"SetupMode":0,"NeedReboot":0,"RebootRequiredReason":0,"StatusCode":0,"InstallDate":"2021-08-18T03:18:57.8798894Z"}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-18T03:18:55.5522196Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-680D-2822CA93D701","eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1107239","seq":164},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":3,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":0,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":1238856,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.CredProvDataModel.SignedInCredProv
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.CredProvDataModel.SignedInCredProv","time":"2021-08-18T03:18:55.7893459Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1107239","seq":165},"metadata":{"f":{"ntsStatus":2,"ntsSubstatus":2},"privTags":50331648},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":309},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"credProviderGuid":"{60B78E88-EAD8-445C-9CFD-0B87F74EA6CD}","userType":1,"logonUiReason":0,"credProvScenario":0,"ntsStatus":0,"ntsSubstatus":0}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig
logging_binary_name: ntoskrnl.exe
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig","time":"2021-08-18T03:18:56.0222652Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1107239","seq":166},"metadata":{"f":{"RebootRequiredReason":5,"InstallDate":9},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Legacy":false,"DeviceInstanceId":"SWD\\MMDEVAPI\\{3.0.0.00000002}.{6C26BA7D-F0B2-4225-B422-8168C5261E45}","DriverFlightIds":"","FirstHardwareId":"MMDEVAPI\\AudioEndpoints","LastCompatibleId":"SWD\\Generic","ClassGuid":"{c166523c-fe0c-4a94-a586-f1a80cfbbf3e}","DriverInfName":"audioendpoint.inf","DriverProvider":"Microsoft","DriverDate":"12/06/2019","DriverVersion":"10.0.19041.1","DriverSubmissionId":"","ExtensionDrivers":"","InboxDriver":1,"SetupMode":0,"NeedReboot":0,"RebootRequiredReason":0,"StatusCode":0,"InstallDate":"2021-08-18T03:18:58.3838301Z"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo
logging_binary_name: svchost_?AudioEndpointBuilder.dll?
friendly_logging_binary_name: Windows Audio Endpoint Builder
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo","time":"2021-08-18T03:18:56.0281701Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1107239","seq":167},"metadata":{"f":{"ContainerId":8,"streamEffectClsid":8,"modeEffectClsid":8,"endpointEffectClsid":8,"localEffectClsid":8,"globalEffectClsid":8,"MicArrayGeometry":{"f":{"usFrequencyBandHi":2,"usFrequencyBandLo":2,"usMicArrayType":2,"usNumberOfMicrophones":2,"usVersion":2,"wHorizontalAngleBegin":2,"wHorizontalAngleEnd":2,"wVerticalAngleBegin":2,"wVerticalAngleEnd":2}}},"privTags":16779264},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":46},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"endpointInstanceId":"SWD\\MMDEVAPI\\{3.0.0.00000002}.{6C26BA7D-F0B2-4225-B422-8168C5261E45}","HWID":"","DeviceInstanceId":"","BusEnumeratorName":"","EndpointDevnodeId":"","EndpointFormFactor":0,"JackSubType":"","endpointID":"{6C26BA7D-F0B2-4225-B422-8168C5261E45}","IsBluetooth":0,"IsUSB":0,"IsSideband":0,"ContainerId":"00000000-0000-0000-0000-000000000000","Flow":0,"streamEffectClsid":"00000000-0000-0000-0000-000000000000","streamEffectModule":"","modeEffectClsid":"00000000-0000-0000-0000-000000000000","modeEffectModule":"","endpointEffectClsid":"00000000-0000-0000-0000-000000000000","endpointEffectModule":"","localEffectClsid":"00000000-0000-0000-0000-000000000000","localEffectModule":"","globalEffectClsid":"00000000-0000-0000-0000-000000000000","globalEffectModule":"","MicArrayGeometry":{"usFrequencyBandHi":0,"usFrequencyBandLo":0,"usMicArrayType":0,"usNumberOfMicrophones":0,"usVersion":0,"wHorizontalAngleBegin":0,"wHorizontalAngleEnd":0,"wVerticalAngleBegin":0,"wVerticalAngleEnd":0,"MicCoords":[]},"persistentId":"","isFarField":0,"AudioPosture - Supported":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Shell.Desktop.LogonFramework.AllLogonTasks
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Shell.Desktop.LogonFramework.AllLogonTasks","time":"2021-08-18T03:18:56.8347225Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-250C-2822CA93D701","op":1,"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1107239","seq":169},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":330},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"wilActivity":{"threadId":440},"logonTypeFlags":0,"logonOptimizationFlags":495,"isMSA":false,"isDomainUser":false,"isAadUser":false,"systemManufacturer":"innotek GmbH","systemProductName":"VirtualBox"}}


full_event_name: TelClientSynthetic.ConnectivityHeartBeat_0
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.ConnectivityHeartBeat_0","time":"2021-08-18T03:18:57.2811671Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":503317064,"epoch":"1107239","seq":170},"metadata":{"privTags":2048,"f":{"LastConnectivityLossTime":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"NetworkState":2,"LastConnectivityLossTime":132737210591478447,"NoNetworkTime":9277,"RestrictedNetworkTime":0,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.EnabledBehaviors
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.EnabledBehaviors","time":"2021-08-18T03:18:57.4148144Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1107239","seq":171},"metadata":{"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":330},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Behaviors":"StartUninstallPrepBehavior, UninstallPrepCompleteBehavior, BootHolographicShellBehavior, LaunchViewerWindowBehavior, ShutdownHolographicShellBehavior, SuspendHolographicShellBehavior, ResumeHolographicShellBehavior, WNFDisplayContextBehavior, WNFInputContextBehavior, StartUserIdleTimerBehavior, StopUserIdleTimerBehavior, DelayedInitializationBehavior, NotifyHolographicForegroundLostBehavior, PauseHolographicDisplayBehavior, ResumeHolographicDisplayBehavior, ReleaseHolographicDisplayBehavior, RunBenchmarkBehavior, SetIPDBehavior, "}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated","time":"2021-08-18T03:18:57.5938732Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1107239","seq":172},"metadata":{"f":{"HmdState":2,"HoloShellReady":2,"HolographicComponentsLoaded":2,"HolographicDisplayState":2,"BenchmarkRequestState":2,"HolographicStateChangeRequest":2,"UninstallState":2,"SessionIdleFlags":2},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":330},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"HmdState":0,"SimulationEnabled":0,"FirstRunSucceeded":0,"ViewerAppRunning":0,"HoloShellReady":3,"HolographicComponentsLoaded":0,"HolographicDisplayState":0,"BenchmarkRequestState":0,"HolographicStateChangeRequest":0,"HolographicAppInForeground":0,"UninstallState":0,"SystemStandby":0,"SessionIdleFlags":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated2
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated2","time":"2021-08-18T03:18:57.5938749Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1107239","seq":173},"metadata":{"f":{"DependencyState":2,"SubscriptionState":2,"RetailDemoState":2},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":330},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"HmdEnumerationComplete":0,"UserIdleTimerExpired":0,"DependencyState":0,"DependencyRecoveryRequired":0,"CompositorAvailable":0,"SystemIsOnDefaultDesktop":1,"PendingHmdIdleTimerReset":0,"SubscriptionState":1,"DisplaysAllowIdleTimer":1,"HolographicDriverDetected":0,"RetailDemoState":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.RaiseStatusChanged
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.RaiseStatusChanged","time":"2021-08-18T03:18:57.5938757Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1107239","seq":174},"metadata":{"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":330},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"SysHolographicWindowingEnvironmentState":0,"StatusCode":15,"SubstatusCode":4}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated","time":"2021-08-18T03:18:57.5939481Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1107239","seq":175},"metadata":{"f":{"HmdState":2,"HoloShellReady":2,"HolographicComponentsLoaded":2,"HolographicDisplayState":2,"BenchmarkRequestState":2,"HolographicStateChangeRequest":2,"UninstallState":2,"SessionIdleFlags":2},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":330},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"HmdState":0,"SimulationEnabled":0,"FirstRunSucceeded":0,"ViewerAppRunning":0,"HoloShellReady":3,"HolographicComponentsLoaded":0,"HolographicDisplayState":0,"BenchmarkRequestState":0,"HolographicStateChangeRequest":0,"HolographicAppInForeground":0,"UninstallState":0,"SystemStandby":0,"SessionIdleFlags":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated2
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated2","time":"2021-08-18T03:18:57.5939488Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1107239","seq":176},"metadata":{"f":{"DependencyState":2,"SubscriptionState":2,"RetailDemoState":2},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":330},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"HmdEnumerationComplete":1,"UserIdleTimerExpired":0,"DependencyState":0,"DependencyRecoveryRequired":0,"CompositorAvailable":0,"SystemIsOnDefaultDesktop":1,"PendingHmdIdleTimerReset":0,"SubscriptionState":1,"DisplaysAllowIdleTimer":1,"HolographicDriverDetected":0,"RetailDemoState":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-18T03:19:00.8280527Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1107239","seq":177},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":309},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":1,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-18T03:19:00.8280795Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1107239","seq":178},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":309},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":5,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-18T03:19:00.8608407Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-AC11-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1107239","seq":179},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":11,"aiSeqId":7,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":1238856,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":19971}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-18T03:19:00.8608470Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-AC11-2822CA93D701","eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1107239","seq":180},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":4,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":1238856,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-18T03:19:00.8608516Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-B211-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1107239","seq":181},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":11,"aiSeqId":8,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":33006,"GPUDeviceID":48879,"SubVendorID":5549,"SubSystemID":1029,"GPURevisionID":0,"DriverVersion":"10.0.19041.868","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16457734,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":true,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":10,"IsRemovable":false,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":19806,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":1,"NumVidPnTargets":1,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_65ab9a260dbf7467\\BasicDisplay.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794020353,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-18T03:19:00.8608540Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-B211-2822CA93D701","eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1107239","seq":182},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":5,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#4&17f0ff54&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":0,"DisplayAdapterLuid":19806,"AdapterInterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Shell.Desktop.LogonFramework.AllLogonTasks
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Shell.Desktop.LogonFramework.AllLogonTasks","time":"2021-08-18T03:19:01.3808964Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-250C-2822CA93D701","op":2,"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1107239","seq":183},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":330},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"wilActivity":{"hresult":0,"threadId":4784},"logonTypeFlags":0,"logonOptimizationFlags":495,"isMSA":false,"isDomainUser":false,"isAadUser":false,"systemManufacturer":"innotek GmbH","systemProductName":"VirtualBox"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-18T03:19:01.6675956Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1107239","seq":184},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00006745b380e62b60d629d8ca49191ff1d73448de64!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":310},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T03:19:01.7677446Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"D11DCEB5-458B-4C8F-BFD4-1956B555B5A5","flags":469762632,"epoch":"1107239","seq":185},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":309},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","AppVersion":"2072/05/12:15:03:46!6F79!logonui.exe","CommandLineHash":953073520,"AppSessionId":"00000C64-0002-000B-6534-30C8DF93D701","AggregationStartTime":"2021-08-18T03:18:57.5825988Z","AggregationDurationMS":6547,"InFocusDurationMS":5985,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":5985,"UserOrDisplayActiveDurationMS":5985,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":1,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1680,"WindowHeight":1050,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":309,"CompositionRenderedSec":6,"CompositionDirtyGeneratedSec":6,"CompositionDirtyPropagatedSec":6,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":5344,"EventSequence":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: svchost_?dcntel.dll?
friendly_logging_binary_name: dcntel
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T03:19:05.5706411Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-DC12-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1107239","seq":186},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"RhzxD6/RmE2cDdwZ.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":181},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"ts_inpt\\ts_kbd","Order":0}],"COMPID":[{"Value":"ti_compat_device","Order":0}],"STACKID":[{"Value":"\\driver\\kbdclass","Order":0},{"Value":"\\driver\\terminpt","Order":1},{"Value":"\\driver\\umbus","Order":2}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"terminput_bus","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"32","ParentId":"umb\\umb\\1&841921d&0&terminput_bus","Description":"Remote Desktop Keyboard Device","BusReportedDescription":"","MatchingID":"ts_inpt\\ts_kbd","Class":"keyboard","ClassGuid":"{4d36e96b-e325-11ce-bfc1-08002be10318}","Manufacturer":"(Standard system devices)","Model":"Remote Desktop Keyboard Device","Inf":"termkbd.inf","DriverName":"terminpt.sys","DriverVerVersion":"10.0.19041.1","DriverVerDate":"04-21-2009","InstallDate":"08-18-2021","FirstInstallDate":"08-18-2021","Provider":"Microsoft","DriverPackageStrongName":"termkbd.inf_amd64_a0634dcf2da1127e","DriverId":"0000f8895f02b9218f682f6574f1631f576820b1df07","Service":"terminpt","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"kbdclass","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2keyboard0","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: svchost_?dcntel.dll?
friendly_logging_binary_name: dcntel
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T03:19:05.5727148Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-DD12-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1107239","seq":187},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"RhzxD6/RmE2cDdwZ.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":181},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"ts_inpt\\ts_mou","Order":0}],"COMPID":[{"Value":"ti_compat_device","Order":0}],"STACKID":[{"Value":"\\driver\\mouclass","Order":0},{"Value":"\\driver\\terminpt","Order":1},{"Value":"\\driver\\umbus","Order":2}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"terminput_bus","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"32","ParentId":"umb\\umb\\1&841921d&0&terminput_bus","Description":"Remote Desktop Mouse Device","BusReportedDescription":"","MatchingID":"ts_inpt\\ts_mou","Class":"mouse","ClassGuid":"{4d36e96f-e325-11ce-bfc1-08002be10318}","Manufacturer":"(Standard system devices)","Model":"Remote Desktop Mouse Device","Inf":"termmou.inf","DriverName":"terminpt.sys","DriverVerVersion":"10.0.19041.1","DriverVerDate":"04-21-2009","InstallDate":"08-18-2021","FirstInstallDate":"08-18-2021","Provider":"Microsoft","DriverPackageStrongName":"termmou.inf_amd64_c4c8f901e3534194","DriverId":"0000f8895f02b9218f682f6574f1631f576820b1df07","Service":"terminpt","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"mouclass","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2mouse0","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: svchost_?dcntel.dll?
friendly_logging_binary_name: dcntel
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T03:19:05.5752711Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-DE12-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1107239","seq":188},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"RhzxD6/RmE2cDdwZ.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":181},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"rdpidd_indirectdisplay","Order":0}],"COMPID":[{"Value":"rdpidd_indirectdisplay","Order":0},{"Value":"swd\\generic","Order":1}],"STACKID":[{"Value":"\\driver\\indirectkmd","Order":0},{"Value":"\\driver\\wudfrd","Order":1},{"Value":"\\driver\\softwaredevice","Order":2}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"swd","ContainerId":"{f86d4937-42e2-4ccc-ab87-14987ca500eb}","DeviceState":"32","ParentId":"htree\\root\\0","Description":"Microsoft Remote Display Adapter","BusReportedDescription":"","MatchingID":"rdpidd_indirectdisplay","Class":"display","ClassGuid":"{4d36e968-e325-11ce-bfc1-08002be10318}","Manufacturer":"Microsoft","Model":"Microsoft Remote Display Adapter","Inf":"rdpidd.inf","DriverName":"wudfrd.sys","DriverVerVersion":"10.0.19041.662","DriverVerDate":"06-21-2006","InstallDate":"08-18-2021","FirstInstallDate":"08-18-2021","Provider":"Microsoft","DriverPackageStrongName":"rdpidd.inf_amd64_ce12c614d182f4f9","DriverId":"000033421ed4ae419781c257eca3ef2939c887cc5371","Service":"wudfrd","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"indirectkmd","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"swd\\remotedisplayenum\\rdpidd_indirectdisplay&sessionid_0002","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: svchost_?dcntel.dll?
friendly_logging_binary_name: dcntel
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T03:19:05.5787909Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-C915-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1107239","seq":189},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"RhzxD6/RmE2cDdwZ.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":181},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"monitor\\default_monitor","Order":0}],"COMPID":[{"Value":"*pnp09ff","Order":0}],"STACKID":[{"Value":"\\driver\\monitor","Order":0},{"Value":"\\driver\\indirectkmd","Order":1}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"display","ContainerId":"{bddc0f4a-b1f9-8f1a-a4d2-71436d72bfd4}","DeviceState":"32","ParentId":"swd\\remotedisplayenum\\rdpidd_indirectdisplay&sessionid_0002","Description":"Generic Non-PnP Monitor","BusReportedDescription":"Generic Monitor","MatchingID":"monitor\\default_monitor","Class":"monitor","ClassGuid":"{4d36e96e-e325-11ce-bfc1-08002be10318}","Manufacturer":"(Standard monitor types)","Model":"Generic Non-PnP Monitor","Inf":"monitor.inf","DriverName":"monitor.sys","DriverVerVersion":"10.0.19041.1151","DriverVerDate":"06-21-2006","InstallDate":"08-18-2021","FirstInstallDate":"08-18-2021","Provider":"Microsoft","DriverPackageStrongName":"monitor.inf_amd64_8a98af5011ee4dc6","DriverId":"000001b82d1fad080e0d354f9e487a9af1f6a4b1b96d","Service":"monitor","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"display\\default_monitor\\1&1f0c3c2f&0&uid256","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentManagementSDK.ReportRequestIds
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentManagementSDK.ReportRequestIds","time":"2021-08-18T03:19:48.4456776Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1107239","seq":190},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":358},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"adUnitId":"353694","adId":"94d8fcc54de54ec8d248b3818bccc394","region":"US","locale":"en-US","asid":"b3c503fa4e6841c989da873018216c64"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Defender.Shield.ShieldHeartbeat
logging_binary_name: securityhealthservice.exe
friendly_logging_binary_name: Windows Security Health Service
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Defender.Shield.ShieldHeartbeat","time":"2021-08-18T03:29:11.9597438Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":191},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a2eceb28f5852d5d23c613999204e3a6fb93aaa2!securityhealthservice.exe","ver":"2095/02/25:15:45:22!FA053!securityhealthservice.exe","asId":354},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"SummaryHealth":"YELLOW","ThreatProtectionHealth":"GREEN","ThreatProtectionStatus":"Defender_Healthy","DefenderAvHealth":"GREEN","DefenderAvStatus":"Defender_Healthy","NetworkProtectionHealth":"GREEN","NetworkProtectionStatus":"Network_Healthy","HealthAdvisorHealth":"GREY","HealthAdvisorStatus":"HealthAdvisor_Healthy","AppAndBrowserHealth":"YELLOW","AppAndBrowserStatus":"AppAndBrowser_PuaSmartScreenOff","HardwareSecurityHealth":"GREEN","HardwareSecurityStatus":"Hardware_Healthy","AccountProtectionHealth":"GREEN","AccountProtectionStatus":"AccountProtection_Healthy","OsProtectionHealth":"GREY","OsProtectionStatus":"OSProtection_Unknown","DataProtectionHealth":"GREY","DataProtectionStatus":"DataProtection_UnsupportedODVersion","WscJsonStatusAvFw":"{ AvList : [{ AntiVirus : Microsoft Defender Antivirus, Exe : windowsdefender:// , State : 0 , SigUpToDate : True}]{ FwList : [{ Firewall : Windows Firewall, Exe : %windir%\\system32\\firewall.cpl, State: 0, SigUpToDate: True}]","DefenderAvCurrentRunningMode":"Normal","IsRtpEnabled":true,"IsRtpByPolicy":false,"IsCloudEnabled":true,"IsCloudByPolicy":false,"IsSampleSubmissionEnabled":true,"IsSampleSubmissionByPolicy":false,"IsCfaEnabled":false,"IsCfaByPolicy":false,"IsDefenderAvDisabled":false,"IsAvDisableByPolicy":false,"IsDefenderAsDisabled":false,"IsAsDisableByPolicy":false,"SmartScreenAppPolicy":"Warn","SmartScreenEdgePolicy":"Warn","SmartScreenStorePolicy":"Warn"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T03:44:11.4542539Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":506462792,"epoch":"1107239","seq":192},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T03:14:11.4506549Z","HeartBeatSequenceNumber":36,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":26,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":18,"SettingsHttpFailures":0,"VortexHttpAttempts":17,"EventsUploaded":230,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":49998,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":2,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":37,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_Aria_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_Aria_5","time":"2021-08-18T03:44:11.4596355Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":193},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T01:14:11.3821744Z","HeartBeatSequenceNumber":3,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":2,"EventsUploaded":25,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":5974,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":0,"PrivacyBlockedCount":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819254Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":194},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:117B97D4","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819273Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":195},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:117B9872","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819284Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":196},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:119E26AD","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819292Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":197},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C0E96C","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819300Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":198},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C3F9D5","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819309Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":199},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C7EB6A","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819317Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":200},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C9408A","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819326Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":201},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C940DB","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819334Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":202},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11CB9A9F","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819342Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":203},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11CB9AC1","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819350Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":204},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11D5BFCD","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819358Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":205},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11D898D7","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819365Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":206},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11DB147C","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819373Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":207},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11DE505A","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819382Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":208},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11DF5B12","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819390Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":209},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11E11E97","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819398Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":210},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11E3E2BA","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819405Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":211},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11E50151","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819413Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":212},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11E9EE98","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819421Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":213},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11F1992A","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819429Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":214},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11F4161E","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819437Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":215},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11F41B68","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819444Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":216},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11FB0F2F","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819452Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":217},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:1201B330","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819460Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":218},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:1202B7FC","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819467Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":219},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:120BB68E","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.1819475Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":220},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:121A20E1","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.2023524Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":221},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C6E5C2","state":3}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-18T04:00:01.2760296Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":222},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:117B97D4","state":2}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.AggregatedStagingState
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.AggregatedStagingState","time":"2021-08-18T04:00:01.2829409Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":223},"metadata":{"privTags":2147483648},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":434},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Features":[{"featureId":18299130,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:117B97D4"},{"featureId":18973123,"hasTrigger":true,"state":2,"variant":1,"payload":177209344,"stateKind":4,"flightId":"FX:11C0E96C"},{"featureId":19638787,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:117B9872"},{"featureId":21969097,"hasTrigger":true,"state":2,"variant":1,"payload":33377331,"stateKind":4,"flightId":"FX:119E26AD"},{"featureId":23057458,"hasTrigger":false,"state":2,"variant":1,"payload":100663311,"stateKind":4,"flightId":"FX:11D5BFCD"},{"featureId":23531064,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11DF5B12"},{"featureId":24706693,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F41B68"},{"featureId":25330851,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DE505A"},{"featureId":27485177,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F1992A"},{"featureId":27919905,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C7EB6A"},{"featureId":28034939,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E50151"},{"featureId":28083526,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DB147C"},{"featureId":28170999,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C9408A"},{"featureId":28240882,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E11E97"},{"featureId":28260762,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C3F9D5"},{"featureId":28361144,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11D898D7"},{"featureId":28585361,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11FB0F2F"},{"featureId":28622680,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11CB9A9F"},{"featureId":28622690,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11C940DB"},{"featureId":28758888,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11CB9AC1"},{"featureId":29815990,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F4161E"},{"featureId":29932051,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E9EE98"},{"featureId":29984114,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E3E2BA"},{"featureId":32249103,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1201B330"},{"featureId":32315643,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1202B7FC"},{"featureId":32328375,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:120BB68E"},{"featureId":33588494,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:121A20E1"}]}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-18T04:00:02.5804323Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-B71D-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1107239","seq":224},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":11,"aiSeqId":9,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":1238856,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":19971}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-18T04:00:02.5804394Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-B71D-2822CA93D701","eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":225},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":6,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":1238856,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-18T04:00:02.5804444Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-BD1D-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1107239","seq":226},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":11,"aiSeqId":10,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":33006,"GPUDeviceID":48879,"SubVendorID":5549,"SubSystemID":1029,"GPURevisionID":0,"DriverVersion":"10.0.19041.868","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16457734,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":true,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":10,"IsRemovable":false,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":19806,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":1,"NumVidPnTargets":1,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_65ab9a260dbf7467\\BasicDisplay.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794020353,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-18T04:00:02.5804470Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-BD1D-2822CA93D701","eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":227},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":7,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#4&17f0ff54&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":0,"DisplayAdapterLuid":19806,"AdapterInterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T04:14:11.4559730Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":506462792,"epoch":"1107239","seq":228},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T03:44:11.4542539Z","HeartBeatSequenceNumber":37,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":4,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":2,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":986,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":2,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":36,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T04:44:11.4998296Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":506462792,"epoch":"1107239","seq":229},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T04:14:11.4559730Z","HeartBeatSequenceNumber":38,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":2,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":35,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":3733,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":2,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T04:45:36.6346825Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"840452A6-8CF9-4C5E-ACFD-1EE9D8DE66A4","flags":469762632,"epoch":"1107239","seq":230},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","AppVersion":"1971/05/25:13:07:28!F55D!csrss.exe","CommandLineHash":3422062667,"AppSessionId":"000012E0-0002-000B-75AE-0DC8DF93D701","AggregationStartTime":"2021-08-18T03:18:57.5825988Z","AggregationDurationMS":5201422,"InFocusDurationMS":0,"FocusLostCount":2,"NewProcessCount":1,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":305,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":14,"CompositionDirtyPropagatedSec":265,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":5201422,"EventSequence":2}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T04:45:36.6346859Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"35129CB8-5099-4A2C-8256-CE216D6F87F6","flags":469762632,"epoch":"1107239","seq":231},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","AppVersion":"1991/07/18:17:41:12!4A83CE!explorer.exe","CommandLineHash":2376842926,"AppSessionId":"0000075C-0002-000B-F43C-11C9DF93D701","AggregationStartTime":"2021-08-18T03:18:57.5825988Z","AggregationDurationMS":5201422,"InFocusDurationMS":242438,"FocusLostCount":2,"NewProcessCount":1,"UserActiveDurationMS":61266,"UserOrDisplayActiveDurationMS":61266,"UserActiveTransitionCount":1,"InFocusBitmap":"0xFF1F000000000000","InputSec":6,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":6,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1680,"WindowHeight":1050,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":330,"CompositionRenderedSec":258,"CompositionDirtyGeneratedSec":262,"CompositionDirtyPropagatedSec":159,"BackgroundMouseSec":11,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":5199219,"EventSequence":3}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T04:45:36.6346888Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"7696B37E-A1E1-4017-B36E-6490EE6AAA91","flags":469762632,"epoch":"1107239","seq":232},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!00005f2596b6c147e13a32c7d73ef1c1365ba0171687!powershell_ise.exe","AppVersion":"2103/02/21:08:22:01!35D26!powershell_ise.exe","CommandLineHash":3481827952,"AppSessionId":"000013C8-0002-000B-BAAD-0A5DE093D701","AggregationStartTime":"2021-08-18T03:18:57.5825988Z","AggregationDurationMS":5201422,"InFocusDurationMS":4951375,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":270421,"UserOrDisplayActiveDurationMS":270421,"UserActiveTransitionCount":4,"InFocusBitmap":"0x00F0FFFFFFFFFFFF","InputSec":8,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":1,"MouseInputSec":7,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1512,"WindowHeight":888,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":8,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":372,"CompositionRenderedSec":5,"CompositionDirtyGeneratedSec":2,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":4950578,"EventSequence":7}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-18T05:01:32.2246839Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":233},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_MOUSE","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":15452859,"deviceTimeSinceLastReadEndMs":15452859,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-18T05:01:32.2247134Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":234},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_KEYBOARD","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":15452859,"deviceTimeSinceLastReadEndMs":15452859,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-18T05:01:32.2296661Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":207618632,"epoch":"1107239","seq":235},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00006745b380e62b60d629d8ca49191ff1d73448de64!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":310},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo
logging_binary_name: svchost_?AudioEndpointBuilder.dll?
friendly_logging_binary_name: Windows Audio Endpoint Builder
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo","time":"2021-08-18T05:01:32.5729947Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1107239","seq":236},"metadata":{"f":{"ContainerId":8,"streamEffectClsid":8,"modeEffectClsid":8,"endpointEffectClsid":8,"localEffectClsid":8,"globalEffectClsid":8,"MicArrayGeometry":{"f":{"usFrequencyBandHi":2,"usFrequencyBandLo":2,"usMicArrayType":2,"usNumberOfMicrophones":2,"usVersion":2,"wHorizontalAngleBegin":2,"wHorizontalAngleEnd":2,"wVerticalAngleBegin":2,"wVerticalAngleEnd":2}}},"privTags":16779264},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":46},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"endpointInstanceId":"SWD\\MMDEVAPI\\{3.0.0.00000002}.{6C26BA7D-F0B2-4225-B422-8168C5261E45}","HWID":"","DeviceInstanceId":"","BusEnumeratorName":"","EndpointDevnodeId":"","EndpointFormFactor":0,"JackSubType":"","endpointID":"{6C26BA7D-F0B2-4225-B422-8168C5261E45}","IsBluetooth":0,"IsUSB":0,"IsSideband":0,"ContainerId":"00000000-0000-0000-0000-000000000000","Flow":0,"streamEffectClsid":"00000000-0000-0000-0000-000000000000","streamEffectModule":"","modeEffectClsid":"00000000-0000-0000-0000-000000000000","modeEffectModule":"","endpointEffectClsid":"00000000-0000-0000-0000-000000000000","endpointEffectModule":"","localEffectClsid":"00000000-0000-0000-0000-000000000000","localEffectModule":"","globalEffectClsid":"00000000-0000-0000-0000-000000000000","globalEffectModule":"","MicArrayGeometry":{"usFrequencyBandHi":0,"usFrequencyBandLo":0,"usMicArrayType":0,"usNumberOfMicrophones":0,"usVersion":0,"wHorizontalAngleBegin":0,"wHorizontalAngleEnd":0,"wVerticalAngleBegin":0,"wVerticalAngleEnd":0,"MicCoords":[]},"persistentId":"","isFarField":0,"AudioPosture - Supported":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-18T05:01:32.6055791Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-F328-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1107239","seq":237},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":11,"aiSeqId":11,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":2326121,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":0,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":19971}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-18T05:01:32.6349178Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-1029-2822CA93D701","eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":238},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":8,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":0,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":2326121,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.CredProvDataModel.SignedInCredProv
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.CredProvDataModel.SignedInCredProv","time":"2021-08-18T05:01:32.7190857Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":239},"metadata":{"f":{"ntsStatus":2,"ntsSubstatus":2},"privTags":50331648},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":465},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"credProviderGuid":"{60B78E88-EAD8-445C-9CFD-0B87F74EA6CD}","userType":1,"logonUiReason":1,"credProvScenario":1,"ntsStatus":0,"ntsSubstatus":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-18T05:01:32.8242405Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":207618632,"epoch":"1107239","seq":240},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00006745b380e62b60d629d8ca49191ff1d73448de64!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":310},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-18T05:01:32.8496132Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":241},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":465},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":5,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-18T05:01:32.8496786Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":242},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":465},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":1,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T05:01:32.9302029Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"1C00BB3D-FD75-41B0-A35F-6C39AC2F4817","flags":471859784,"epoch":"1107239","seq":243},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":465},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","AppVersion":"2072/05/12:15:03:46!6F79!logonui.exe","CommandLineHash":2059424209,"AppSessionId":"00001978-0002-000B-E39C-0E1EEE93D701","AggregationStartTime":"2021-08-18T04:45:39.0439268Z","AggregationDurationMS":956234,"InFocusDurationMS":375,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000000000800000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1680,"WindowHeight":1050,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":1,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":465,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":0,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":109,"EventSequence":8}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: svchost_?dcntel.dll?
friendly_logging_binary_name: dcntel
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T05:01:42.7075261Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-AC2A-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1107239","seq":244},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"m6TeMNbkZEiRoXld.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":181},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"mmdevapi\\audioendpoints","Order":0}],"COMPID":[{"Value":"genericaudioendpoint","Order":0},{"Value":"swd\\genericraw","Order":1},{"Value":"swd\\generic","Order":2}],"STACKID":[{"Value":"\\driver\\softwaredevice","Order":0}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"swd","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"32","ParentId":"htree\\root\\0","Description":"Remote Audio","BusReportedDescription":"Remote Audio","MatchingID":"mmdevapi\\audioendpoints","Class":"audioendpoint","ClassGuid":"{c166523c-fe0c-4a94-a586-f1a80cfbbf3e}","Manufacturer":"Microsoft","Model":"Audio Endpoint","Inf":"audioendpoint.inf","DriverName":"","DriverVerVersion":"10.0.19041.1","DriverVerDate":"12-06-2019","InstallDate":"08-18-2021","FirstInstallDate":"08-18-2021","Provider":"Microsoft","DriverPackageStrongName":"audioendpoint.inf_amd64_4fc4a632c1490033","DriverId":"","Service":"","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"swd\\mmdevapi\\{3.0.0.00000002}.{6c26ba7d-f0b2-4225-b422-8168c5261e45}","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T05:14:11.5027953Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":506462792,"epoch":"1107239","seq":245},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T04:44:11.4998296Z","HeartBeatSequenceNumber":39,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":2,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":1,"SettingsHttpFailures":0,"VortexHttpAttempts":2,"EventsUploaded":4,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":2421,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":2,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":16,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T05:36:14.3309632Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-CD2B-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":246},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"7l7MRcwqj0qQ9Tty.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":496},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"NotificationChannelTask","isEnabled":1,"lastRenderedCreativeId":"0","selectedPlacementId":"","lastRenderedTime":132737385766178058,"lastImpressionTime":132737385767006992,"nextRotationTime":0,"placementStateReportFlags":511}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ProcessCreativeEvent
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ProcessCreativeEvent","time":"2021-08-18T05:36:43.6341777Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-2B2D-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":247},"metadata":{"f":{"eventTime":9}},"mscv":{"cV":"XvZWgB5ZrkqvWah7.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":502},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementId":"SubscribedContent-310091","creativeId":"1629183605`128000000000490069`0`a92b3e79dffa4bd08b2ae273f83051e1`3600`310091`137270880000000000","eventType":0,"eventToken":"/?eventName=impression","eventTime":"2021-08-18T05:36:45.9914498Z"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OneDrive.Sync.Updater.CommonDataV2
logging_binary_name: onedrivestandaloneupdater.exe
friendly_logging_binary_name: Standalone Updater
payload:
  {"ver":"4.0","name":"Microsoft.OneDrive.Sync.Updater.CommonDataV2","time":"2021-08-18T05:41:24.5706401Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1107239","seq":248},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0006f0bf27afc153a7e3f2ceded53c7a26f500000904!0000f782729d96f2c071167b77eed789036e0368ec12!onedrivestandaloneupdater.exe","ver":"2073/07/28:20:57:21!2B7A22!onedrivestandaloneupdater.exe","asId":503},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppVersion":"21.139.0711.0001","OfficeVersion":"","OSArch":"AMD64","BuildArch":"x86","Market":"en-US","OneDriveDeviceId":"20865b8d-f377-16d7-6725-8afe866c8528","MachineGuid":"5A2CD9B2-5E46-4396-99A8-5C79DF95E368","UserGuid":"784F0A70-E807-4F90-B46C-2DA0125D9E1B","IsMSFTInternal":"0","OSDeviceName":"*****","OSUserName":"*****","IsTestMachine":"false","Environment":"Prod","UpdateRing":"Prod","AccountType":"StandaloneUpdater","UpdateGroupId":"100","FeatureSet":"|"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OneDrive.Sync.Updater.UpdateXmlDownloadHResultV2
logging_binary_name: onedrivestandaloneupdater.exe
friendly_logging_binary_name: Standalone Updater
payload:
  {"ver":"4.0","name":"Microsoft.OneDrive.Sync.Updater.UpdateXmlDownloadHResultV2","time":"2021-08-18T05:41:25.2473049Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1107239","seq":249},"metadata":{"f":{"hr":2}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0006f0bf27afc153a7e3f2ceded53c7a26f500000904!0000f782729d96f2c071167b77eed789036e0368ec12!onedrivestandaloneupdater.exe","ver":"2073/07/28:20:57:21!2B7A22!onedrivestandaloneupdater.exe","asId":503},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hr":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OneDrive.Sync.Updater.UpdateOverallResult
logging_binary_name: onedrivestandaloneupdater.exe
friendly_logging_binary_name: Standalone Updater
payload:
  {"ver":"4.0","name":"Microsoft.OneDrive.Sync.Updater.UpdateOverallResult","time":"2021-08-18T05:41:25.2505744Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1107239","seq":250},"metadata":{"f":{"hr":2}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0006f0bf27afc153a7e3f2ceded53c7a26f500000904!0000f782729d96f2c071167b77eed789036e0368ec12!onedrivestandaloneupdater.exe","ver":"2073/07/28:20:57:21!2B7A22!onedrivestandaloneupdater.exe","asId":503},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"UpdaterVersion":"21.139.0711.0001","IsLoggingEnabled":1,"hr":-2147160572}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T05:44:11.5159355Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":506462792,"epoch":"1107239","seq":251},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T05:14:11.5027953Z","HeartBeatSequenceNumber":40,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":3,"SettingsHttpFailures":0,"VortexHttpAttempts":2,"EventsUploaded":13,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":5356,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":2,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":6,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.PostUpdateUseInfo
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.PostUpdateUseInfo","time":"2021-08-18T06:08:54.6041884Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1107239","seq":252},"metadata":{"f":{"CumulativeUserActiveDurationInS":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"UpdateKey":1466689571,"UpdateCount":1,"CrashCount":0,"SessionCount":3,"LogCount":5,"UserActiveDurationInS":6610,"UserOrDispActiveDurationInS":6610,"DesktopActiveDurationInS":6610,"Version":210,"BootIdMin":9,"BootIdMax":11,"PMUUKey":4048319889,"SessionDurationInS":28791,"SessionUptimeInS":28791,"UserInputInS":3092,"MouseInputInS":1350,"KeyboardInputInS":1827,"SipKeyboardInputInS":0,"TouchInputInS":0,"PrecisionTouchpadInputInS":0,"InForegroundInS":21954,"ForegroundSwitchCount":286,"UserActiveTransitionCount":21,"DeltaLogTimeInS":65402,"DeltaUpdateCount":0,"DeltaCrashCount":0,"DeltaSessionCount":1,"DeltaUserActiveDurationInS":399,"DeltaUserOrDispActiveDurationInS":399,"DeltaDesktopActiveDurationInS":399,"DeltaSessionDurationInS":10199,"DeltaSessionUptimeInS":10199,"DeltaUserInputInS":15,"DeltaMouseInputInS":13,"DeltaKeyboardInputInS":1,"DeltaTouchInputInS":0,"DeltaInForegroundInS":5201,"DeltaForegroundSwitchCount":10,"DeltaUserActiveTransitionCount":7,"UATWarningCount":0,"EventReason":4,"CumulativeUserActiveDurationInS":6610,"UpdateCountAccumulationStarted":1,"BuildUserActiveDurationInS":6610,"BuildNumber":19041}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T06:08:54.6043438Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"004E6851-585A-48FB-A17A-1B1457069986","flags":469762632,"epoch":"1107239","seq":253},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","AppVersion":"1971/05/25:13:07:28!F55D!csrss.exe","CommandLineHash":3422062667,"AppSessionId":"000012E0-0002-000B-75AE-0DC8DF93D701","AggregationStartTime":"2021-08-18T04:45:39.0439268Z","AggregationDurationMS":4997922,"InFocusDurationMS":0,"FocusLostCount":2,"NewProcessCount":0,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000800000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":1,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":305,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":4,"CompositionDirtyPropagatedSec":198,"BackgroundMouseSec":9,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":10199391,"EventSequence":9}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T06:08:54.6043476Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"A512B9B1-684A-4DD8-8CE3-60913DCA7A05","flags":469762632,"epoch":"1107239","seq":254},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!00005f2596b6c147e13a32c7d73ef1c1365ba0171687!powershell_ise.exe","AppVersion":"2103/02/21:08:22:01!35D26!powershell_ise.exe","CommandLineHash":3481827952,"AppSessionId":"000013C8-0002-000B-BAAD-0A5DE093D701","AggregationStartTime":"2021-08-18T04:45:39.0439268Z","AggregationDurationMS":4997922,"InFocusDurationMS":4041782,"FocusLostCount":1,"NewProcessCount":0,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":1,"InFocusBitmap":"0x000000000080FFFF","InputSec":1,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":1,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1512,"WindowHeight":888,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":8,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":1,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":372,"CompositionRenderedSec":2,"CompositionDirtyGeneratedSec":2,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":9948547,"EventSequence":11}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T06:14:11.5161163Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":255},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T05:44:11.5159355Z","HeartBeatSequenceNumber":41,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":2,"EventsUploaded":6,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":2322,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":4,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentManagementSDK.ReportRequestIds
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentManagementSDK.ReportRequestIds","time":"2021-08-18T06:17:20.5373534Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":256},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"adUnitId":"310091","adId":"94d8fcc54de54ec8d248b3818bccc394","region":"US","locale":"en-US","asid":"386684505cf14835b76817f92cd4dc25"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T06:17:28.6779343Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-9427-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":257},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"MCgEJnaHvk+Vcsl1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"SubscribedContent-202914","isEnabled":0,"lastRenderedCreativeId":"1629179513`116000000000270658`0`9a8d8141668e463bbeec366d0bdf743f`0`202914`137129148000000000","selectedPlacementId":"202914","lastRenderedTime":132736531241200687,"lastImpressionTime":132736531238822587,"nextRotationTime":132737385727436414,"placementStateReportFlags":194}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T06:17:28.6814140Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-9427-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":258},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"MCgEJnaHvk+Vcsl1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"SubscribedContent-280810","isEnabled":1,"lastRenderedCreativeId":"1629179513`128000000001627409`0`5e1ce3c729bd45438f42bcac2fa80e6b`604800`280810`137271744000000000","selectedPlacementId":"280810","lastRenderedTime":132737304011162401,"lastImpressionTime":0,"nextRotationTime":137271743997737312,"placementStateReportFlags":195}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T06:17:28.6847691Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-9427-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":259},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"MCgEJnaHvk+Vcsl1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"SubscribedContent-280811","isEnabled":1,"lastRenderedCreativeId":"1629179514`128000000001627409`0`c9afb9ab5e5543e8ac24139b05effed9`604800`280811`137271744000000000","selectedPlacementId":"280811","lastRenderedTime":132737304011329716,"lastImpressionTime":0,"nextRotationTime":137271743998050755,"placementStateReportFlags":195}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T06:17:28.7048684Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-9427-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":260},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"MCgEJnaHvk+Vcsl1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"SubscribedContent-314559","isEnabled":0,"lastRenderedCreativeId":"1629179397`128000000002157569`0`fc6a65bb1cbc433bb386a542e7fa5a16`604800`314559`135143676000000000","selectedPlacementId":"314559","lastRenderedTime":132736531126797372,"lastImpressionTime":132736531126019074,"nextRotationTime":132742579123048391,"placementStateReportFlags":194}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T06:17:28.7128783Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-9427-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":261},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"MCgEJnaHvk+Vcsl1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"SubscribedContent-353694","isEnabled":1,"lastRenderedCreativeId":"default","selectedPlacementId":"353694","lastRenderedTime":0,"lastImpressionTime":0,"nextRotationTime":132737391525867013,"placementStateReportFlags":195}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T06:17:28.7166354Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-9427-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":262},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"MCgEJnaHvk+Vcsl1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"SubscribedContent-353698","isEnabled":1,"lastRenderedCreativeId":"1629179515`128000000001627409`0`97f5d225c2f2444181c944bc324be612`604800`353698`137271744000000000","selectedPlacementId":"353698","lastRenderedTime":132736531240755549,"lastImpressionTime":0,"nextRotationTime":137271743993360488,"placementStateReportFlags":195}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T06:17:28.7219289Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-9427-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":263},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"MCgEJnaHvk+Vcsl1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"SubscribedContent-88000161","isEnabled":1,"lastRenderedCreativeId":"1629179515`128000000001627409`0`cfb2cee57003451e91bcedbbd09d7377`604800`88000161`137271744000000000","selectedPlacementId":"88000161","lastRenderedTime":132737304011681400,"lastImpressionTime":0,"nextRotationTime":137271743994617598,"placementStateReportFlags":195}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T06:17:28.7256040Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-9427-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":264},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"MCgEJnaHvk+Vcsl1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"SubscribedContent-88000163","isEnabled":1,"lastRenderedCreativeId":"1629179515`128000000001627409`0`ad340b1880be4d739a45b7b2366597ae`604800`88000163`137271744000000000","selectedPlacementId":"88000163","lastRenderedTime":132737304012028758,"lastImpressionTime":0,"nextRotationTime":137271743995111242,"placementStateReportFlags":195}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-18T06:17:28.7295144Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-9427-2822CA93D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":265},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"MCgEJnaHvk+Vcsl1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":531},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"SubscribedContent-88000165","isEnabled":1,"lastRenderedCreativeId":"1629179516`128000000001627409`0`f5040d1413f14d5e93cb3eaa92382596`604800`88000165`137271744000000000","selectedPlacementId":"88000165","lastRenderedTime":132737304012324360,"lastImpressionTime":0,"nextRotationTime":137271743995734736,"placementStateReportFlags":195}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T06:44:11.5170856Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":266},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T06:14:11.5161163Z","HeartBeatSequenceNumber":42,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":3,"SettingsHttpFailures":0,"VortexHttpAttempts":2,"EventsUploaded":14,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":3736,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":11,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T07:14:11.5316732Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":267},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T06:44:11.5170856Z","HeartBeatSequenceNumber":43,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":1,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":1,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":891,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentManagementSDK.ReportRequestIds
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentManagementSDK.ReportRequestIds","time":"2021-08-18T07:18:57.5300259Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1107239","seq":268},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":556},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"adUnitId":"353694","adId":"94d8fcc54de54ec8d248b3818bccc394","region":"US","locale":"en-US","asid":"39a76174eb7b461e867cb1d758d8bbb0"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T07:44:11.5472674Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":269},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T07:14:11.5316732Z","HeartBeatSequenceNumber":44,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":6,"SettingsHttpFailures":0,"VortexHttpAttempts":2,"EventsUploaded":2,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":1500,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":2,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":2,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T08:14:11.5629894Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":270},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T07:44:11.5472674Z","HeartBeatSequenceNumber":45,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":2,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":2,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":1,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":891,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.Power.OSStateChange
logging_binary_name: svchost_?ntoskrnl.exe?
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.Power.OSStateChange","time":"2021-08-18T08:44:07.4325474Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1009779272,"epoch":"1107239","seq":271},"metadata":{"f":{"StateDurationMS":5,"BootTimeUTC":9,"UptimeDeltaMS":5,"TotalDurationMS":5,"TotalUptimeMS":5,"EnergyChangeV2":4},"privTags":16777216},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"StateTransition":5,"StateTransitionSub":1,"StateDurationMS":28806175,"BootId":11,"BootTimeUTC":"2021-08-18T00:44:01.2565429Z","UptimeDeltaMS":28806175,"TotalDurationMS":28806175,"TotalUptimeMS":28806175,"LastStateTransition":1,"LastStateTransitionSub":1,"EventSequence":2,"ActualTransitions":1,"TransitionsToOn":1,"BatteryCapacity":0,"BatteryCharge":0,"EnergyChangeV2":0,"EnergyChangeV2Flags":1,"AcPowerOnline":true,"BatteryDischarging":false}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T08:44:11.5786645Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":272},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T08:14:11.5629894Z","HeartBeatSequenceNumber":46,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":1,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":1,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":891,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":2,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T09:14:11.5942080Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":273},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T08:44:11.5786645Z","HeartBeatSequenceNumber":47,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":1,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":2,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":1298,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T09:44:11.6101211Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":274},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T09:14:11.5942080Z","HeartBeatSequenceNumber":48,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":1,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":1,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":889,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T10:14:11.6103027Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":275},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T09:44:11.6101211Z","HeartBeatSequenceNumber":49,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":0,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":4,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":1,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":888,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.WilFeatures.AggregateDeviceUsage
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.WilFeatures.AggregateDeviceUsage","time":"2021-08-18T10:44:09.2233928Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1009779272,"epoch":"1107239","seq":276},"metadata":{"f":{"timeSinceLastReportMS":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":603},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"kinds":[257,257,257,257,257,257,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,258,258,259,259,260,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,7,320,320,320,320,320,320,320,320,320,320,320,320,320,320,321,321,321,322,323,326],"featureIds":[16257538,25292146,8749962,13610405,14120903,15709403,21331712,9318657,19349505,33244161,18792193,19582721,16257538,32315650,21044226,6723842,20506114,18518788,31499015,21138696,16290313,20357897,8253193,26390027,32176907,8664332,12773644,12990221,7960589,8495373,31564557,16372493,20840718,23092750,20813326,13482510,14550287,8820240,16311570,7923987,19248661,15453717,22953751,20484887,23422232,14860313,7881243,20756507,15725851,31607580,6067484,18982684,33299997,32613405,5410078,11030047,32731679,32871455,20840737,8025889,22006819,21392164,13085732,13974053,15442981,18333221,33202726,17983783,18996007,32212008,18587944,21043497,20652073,32719657,16860457,17878057,20516394,11102250,19052330,22984746,14599978,10036267,8469804,21157932,32377389,16046125,18710574,30278703,16462895,13973807,21402927,32502063,19222576,33103921,5195825,10770226,10998066,23057458,11114803,22929203,27502134,22984758,18741302,30379319,31471418,20237883,5419836,31352381,15105853,31830845,8598334,16426302,30202174,30743104,6989120,19574848,7776321,32315714,17505602,4859458,11449154,18983747,31351620,17505606,11946054,13728070,18989638,21726535,30618184,10942792,12053065,8497738,16398156,11813196,7382860,21082956,21743692,31917134,19141198,15769422,12707662,12719183,19412047,15521103,21228112,31912017,21667666,11183954,14464852,19554133,8718934,33575511,18001239,13634392,18616153,33103193,31871321,9720665,21858649,31011674,11886170,23426140,33452382,19141473,29776482,33595746,7837283,27466852,18469988,22294629,6869861,31277159,32248680,9448552,32942952,32223336,22006889,30135145,14338410,31259242,30060907,17650284,21184109,30067821,21100654,17937263,24776048,31609456,19400049,10698865,4877938,20421490,21144178,20974195,33283444,8299381,17476469,18988150,33591159,32224631,9835896,6614904,3775609,32612473,13976955,15441787,13740155,10017660,21237886,32144254,13273215,9766529,7546754,18548355,6353283,19287428,15421572,13404804,8644228,18671492,4854405,11423877,18631046,17202054,21588615,18322055,21868935,18995079,8642183,19263623,16095113,9666698,8749962,14940810,18697867,8933771,27368843,15920779,31908493,23078286,31541646,10647694,31250062,18827408,27371152,20442768,13837201,30063762,27972498,6391443,16649109,5348245,20160405,13786518,29816214,11954839,9270423,12908183,21394072,14098587,14363547,8867227,33891228,21055388,20603548,15443100,11067548,9608605,32095390,13076897,394658,18715554,9432994,30375331,18212771,153764,33451173,13610405,28173477,32502693,10896550,11790758,11024039,11384999,31839656,29940137,33598379,16273325,12546989,15520941,19453616,10014385,14520754,18983602,16487091,19775411,15399348,17654197,25418678,33592503,9896632,20460728,20670392,15932089,33257914,32213178,32104890,15333818,9146043,8302267,33122236,11824828,32867516,19583676,9386173,9982909,33117885,11275454,21331646,32307390,19070398,32540095,13536959,10094528,11355840,21617600,32315585,32335297,17523138,10698435,8482243,15964611,32617668,13186501,30818245,21405638,21151430,12716999,14120903,5129928,9910473,15815625,12002250,8348618,13539786,14316747,5654988,32075724,15724492,17149389,11171023,31950543,5642192,5993168,8100561,10998481,33454547,6390483,9300179,14612182,27485655,26225368,19138521,11156953,983002,30942939,30120412,28184541,18422749,31932128,9207521,32315618,5643234,32474850,30983394,33381859,6171364,19349732,31281380,13199844,220937958,8482022,18704615,14263527,16620264,16424680,26599656,17468649,33108971,29705707,9140719,11985136,6258161,32014833,6356209,16430322,14354675,18950387,11897843,20892916,11618549,17649909,19552245,24509429,9318646,31081462,6165239,7328759,28170999,7007735,21360375,33778936,5579257,32332793,9205753,33613049,32441083,17172731,21445372,14266621,22961407,25292146,8749962,25292146,8749962,25292146,15812352,21008641,21968130,18195458,26524674,8305922,18780676,12990213,20751365,21878278,14166282,6094603,21004556,17013261,25345549,8277262,18455822,10402319,11144977,21330961,8402194,8591635,26524691,16624148,19415061,14391829,18554648,10011417,10091034,26769179,7923995,22994721,9032482,1470244,13540135,10658343,11832104,14155817,8402217,14098732,20469805,10727725,21779246,18765106,11425330,20107317,21092406,13050423,18741303,20274749,15342655,8027970,8426306,6997058,16107080,20367435,21093963,7450444,21302095,12881744,18031186,16667730,21597266,9427027,19603540,27371092,20681302,19052374,21595991,20819543,13886809,23128665,17154140,8249692,21253981,22119005,12862046,21654623,14445663,22456928,21084512,14939489,20577377,22096226,10042979,8479587,15681380,19319140,19164517,17727333,10971239,8508009,21989994,17826155,9206638,18464624,19261552,20371570,25292146,10998643,18550900,9322870,19643255,14778232,21966201,19276410,26469242,12067452,10778748,14648958,12196482,18687362,23615618,17524868,19617417,13816458,13843340,21431693,21169807,15940751,9064593,13133713,19043985,7438994,22119314,18138258,21431699,13068691,13932180,17512854,23348889,22529690,10770075,19349660,10526621,13973407,12804255,7245727,26382751,13289631,18656672,17479072,19570081,11786145,14861475,7010211,13622180,16975013,10756773,6328229,14301350,20169383,14398121,20805803,19957419,17728684,13234095,6190512,19448754,19040692,21527221,6115766,12575415,29990585,6624442,25175482,19448762,20624316,19631037,10011581,16597439,11137471,13705666,17154245,16526280,13293513,21043146,16892364,19059664,6487760,22162129,9853137,18624723,21726163,16486102,10139606,33621463,26489815,20806104,8188120,21238233,14096858,8313050,13709532,21040093,19327965,25173983,19060191,20371679,29947360,19864035,21769444,10164710,19642854,19928807,20683751,21031911,10980073,16110057,5224938,10242797,21892848,21209073,21006835,19400436,20806132,19908852,15522294,23057655,10121720,26524665,13330426,32315643,16669694,21769444,16257538,16046125,11800907,9448552,25292146,13740155,8749962,14940810,16721823,13610405,18716070,16273325,14120903,15709403,23422232,19052330,17149389,17983783,8187072,27371152],"timeSinceLastReportMS":85684159}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.WilFeatures.AggregateUniqueUsage
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.WilFeatures.AggregateUniqueUsage","time":"2021-08-18T10:44:09.2234013Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1009779272,"epoch":"1107239","seq":277},"metadata":{"f":{"timeSinceLastReportMS":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":603},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"kinds":[0,0,0,0,0,0,0,1,1,1,1,1,1,1,4,5,100,100,101,101,104,104,112,125,127],"featureIds":[7960589,8278123,8642183,27371152,6201249,15709403,8049662,23422232,8221526,8278123,8749962,12003736,3261926,29746671,11705370,13289631,17505602,17505606,3261926,11985136,394658,11824828,10397285,10397285,10397285],"counts":[8,1,13,1,207,1,3,1,96,36,1,1,36,21,61,4,3,6,7236,51,3,1,1,1,1],"timeSinceLastReportMS":85684159}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.FeatureExperiment.AggregatedStagingState
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.AggregatedStagingState","time":"2021-08-18T10:44:09.2239931Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1009779272,"epoch":"1107239","seq":278},"metadata":{"privTags":2147483648},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":603},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Features":[{"featureId":18299130,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:117B97D4"},{"featureId":18973123,"hasTrigger":true,"state":2,"variant":1,"payload":177209344,"stateKind":4,"flightId":"FX:11C0E96C"},{"featureId":19638787,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:117B9872"},{"featureId":21969097,"hasTrigger":true,"state":2,"variant":1,"payload":33377331,"stateKind":4,"flightId":"FX:119E26AD"},{"featureId":23057458,"hasTrigger":false,"state":2,"variant":1,"payload":100663311,"stateKind":4,"flightId":"FX:11D5BFCD"},{"featureId":23531064,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11DF5B12"},{"featureId":24706693,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F41B68"},{"featureId":25330851,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DE505A"},{"featureId":27485177,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F1992A"},{"featureId":27919905,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C7EB6A"},{"featureId":28034939,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E50151"},{"featureId":28083526,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DB147C"},{"featureId":28170999,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C9408A"},{"featureId":28240882,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E11E97"},{"featureId":28260762,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C3F9D5"},{"featureId":28361144,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11D898D7"},{"featureId":28585361,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11FB0F2F"},{"featureId":28622680,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11CB9A9F"},{"featureId":28622690,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11C940DB"},{"featureId":28758888,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11CB9AC1"},{"featureId":29815990,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F4161E"},{"featureId":29932051,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E9EE98"},{"featureId":29984114,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E3E2BA"},{"featureId":32249103,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1201B330"},{"featureId":32315643,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1202B7FC"},{"featureId":32328375,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:120BB68E"},{"featureId":33588494,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:121A20E1"}]}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-18T10:44:11.6527094Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1043333704,"epoch":"1107239","seq":279},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T10:14:11.6103027Z","HeartBeatSequenceNumber":50,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":1,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":2,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":1,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":890,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":0,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":4,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-18T00:51:08.226"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-18T11:02:30.9330196Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":280},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_MOUSE","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":37111578,"deviceTimeSinceLastReadEndMs":37111578,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-18T11:02:30.9332823Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":281},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_KEYBOARD","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":37111578,"deviceTimeSinceLastReadEndMs":37111578,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-18T11:02:30.9632003Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":207618632,"epoch":"1107239","seq":282},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00006745b380e62b60d629d8ca49191ff1d73448de64!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":310},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.PostUpdateUseInfo
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.PostUpdateUseInfo","time":"2021-08-18T11:02:30.9634688Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":283},"metadata":{"f":{"CumulativeUserActiveDurationInS":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":305},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"UpdateKey":1466689571,"UpdateCount":1,"CrashCount":0,"SessionCount":3,"LogCount":6,"UserActiveDurationInS":6670,"UserOrDispActiveDurationInS":6670,"DesktopActiveDurationInS":6670,"Version":210,"BootIdMin":9,"BootIdMax":11,"PMUUKey":4048319889,"SessionDurationInS":46407,"SessionUptimeInS":46407,"UserInputInS":3093,"MouseInputInS":1350,"KeyboardInputInS":1827,"SipKeyboardInputInS":0,"TouchInputInS":0,"PrecisionTouchpadInputInS":0,"InForegroundInS":25996,"ForegroundSwitchCount":288,"UserActiveTransitionCount":21,"DeltaLogTimeInS":17616,"DeltaUpdateCount":0,"DeltaCrashCount":0,"DeltaSessionCount":0,"DeltaUserActiveDurationInS":60,"DeltaUserOrDispActiveDurationInS":60,"DeltaDesktopActiveDurationInS":60,"DeltaSessionDurationInS":17616,"DeltaSessionUptimeInS":17616,"DeltaUserInputInS":1,"DeltaMouseInputInS":0,"DeltaKeyboardInputInS":0,"DeltaTouchInputInS":0,"DeltaInForegroundInS":4042,"DeltaForegroundSwitchCount":2,"DeltaUserActiveTransitionCount":0,"UATWarningCount":0,"EventReason":4,"CumulativeUserActiveDurationInS":6670,"UpdateCountAccumulationStarted":1,"BuildUserActiveDurationInS":6670,"BuildNumber":19041}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo
logging_binary_name: svchost_?AudioEndpointBuilder.dll?
friendly_logging_binary_name: Windows Audio Endpoint Builder
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo","time":"2021-08-18T11:02:31.3485673Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1107239","seq":284},"metadata":{"f":{"ContainerId":8,"streamEffectClsid":8,"modeEffectClsid":8,"endpointEffectClsid":8,"localEffectClsid":8,"globalEffectClsid":8,"MicArrayGeometry":{"f":{"usFrequencyBandHi":2,"usFrequencyBandLo":2,"usMicArrayType":2,"usNumberOfMicrophones":2,"usVersion":2,"wHorizontalAngleBegin":2,"wHorizontalAngleEnd":2,"wVerticalAngleBegin":2,"wVerticalAngleEnd":2}}},"privTags":16779264},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":46},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"endpointInstanceId":"SWD\\MMDEVAPI\\{3.0.0.00000002}.{6C26BA7D-F0B2-4225-B422-8168C5261E45}","HWID":"","DeviceInstanceId":"","BusEnumeratorName":"","EndpointDevnodeId":"","EndpointFormFactor":0,"JackSubType":"","endpointID":"{6C26BA7D-F0B2-4225-B422-8168C5261E45}","IsBluetooth":0,"IsUSB":0,"IsSideband":0,"ContainerId":"00000000-0000-0000-0000-000000000000","Flow":0,"streamEffectClsid":"00000000-0000-0000-0000-000000000000","streamEffectModule":"","modeEffectClsid":"00000000-0000-0000-0000-000000000000","modeEffectModule":"","endpointEffectClsid":"00000000-0000-0000-0000-000000000000","endpointEffectModule":"","localEffectClsid":"00000000-0000-0000-0000-000000000000","localEffectModule":"","globalEffectClsid":"00000000-0000-0000-0000-000000000000","globalEffectModule":"","MicArrayGeometry":{"usFrequencyBandHi":0,"usFrequencyBandLo":0,"usMicArrayType":0,"usNumberOfMicrophones":0,"usVersion":0,"wHorizontalAngleBegin":0,"wHorizontalAngleEnd":0,"wVerticalAngleBegin":0,"wVerticalAngleEnd":0,"MicCoords":[]},"persistentId":"","isFarField":0,"AudioPosture - Supported":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-18T11:02:31.3509029Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-4E2E-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1107239","seq":285},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":11,"aiSeqId":12,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":4650694,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":0,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":19971}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-18T11:02:31.4750400Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-DC37-2822CA93D701","eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":286},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":9,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":0,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":4650694,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.CredProvDataModel.SignedInCredProv
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.CredProvDataModel.SignedInCredProv","time":"2021-08-18T11:02:31.6044687Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":287},"metadata":{"f":{"ntsStatus":2,"ntsSubstatus":2},"privTags":50331648},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":620},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"credProviderGuid":"{60B78E88-EAD8-445C-9CFD-0B87F74EA6CD}","userType":1,"logonUiReason":1,"credProvScenario":1,"ntsStatus":0,"ntsSubstatus":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: winlogon.exe
friendly_logging_binary_name: Windows Logon Application
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T11:02:31.7264218Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"8E243CBF-E8FE-4645-ACA4-851F89116C2D","flags":471859784,"epoch":"1107239","seq":288},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000602a82365f1e268d412949b4049b1dc7acc04137!winlogon.exe","ver":"1981/01/18:11:29:23!E717E!winlogon.exe","asId":306},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","AppVersion":"1971/05/25:13:07:28!F55D!csrss.exe","CommandLineHash":3422062667,"AppSessionId":"000012E0-0002-000B-75AE-0DC8DF93D701","AggregationStartTime":"2021-08-18T06:08:57.0233756Z","AggregationDurationMS":17617063,"InFocusDurationMS":0,"FocusLostCount":1,"NewProcessCount":0,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":2,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":305,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":3,"CompositionDirtyPropagatedSec":11,"BackgroundMouseSec":11,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":27816500,"EventSequence":14}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: winlogon.exe
friendly_logging_binary_name: Windows Logon Application
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T11:02:31.7264237Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"4E5B6B3C-1FEF-483C-865D-BBD5D641D498","flags":471859784,"epoch":"1107239","seq":289},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000602a82365f1e268d412949b4049b1dc7acc04137!winlogon.exe","ver":"1981/01/18:11:29:23!E717E!winlogon.exe","asId":306},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","AppVersion":"2072/05/12:15:03:46!6F79!logonui.exe","CommandLineHash":2192656619,"AppSessionId":"00000CF8-0002-000B-4676-B98B2094D701","AggregationStartTime":"2021-08-18T06:08:57.0233756Z","AggregationDurationMS":17617063,"InFocusDurationMS":406,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000000000000080","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1680,"WindowHeight":1050,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":2,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":620,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":0,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":0,"EventSequence":17}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-18T11:02:31.7626298Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":207618632,"epoch":"1107239","seq":290},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00006745b380e62b60d629d8ca49191ff1d73448de64!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":310},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-18T11:02:31.8051057Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":291},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":620},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":5,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-18T11:02:31.8052188Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1107239","seq":292},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":620},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":1,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T11:02:31.9956183Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"C244763E-5E59-4CB6-8362-FE7D5AD9902B","flags":471859784,"epoch":"1107239","seq":293},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":620},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","AppVersion":"2072/05/12:15:03:46!6F79!logonui.exe","CommandLineHash":2192656619,"AppSessionId":"00000CF8-0002-000B-4676-B98B2094D701","AggregationStartTime":"2021-08-18T11:02:34.0862867Z","AggregationDurationMS":266,"InFocusDurationMS":0,"FocusLostCount":0,"NewProcessCount":0,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000000000000000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":3,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":620,"CompositionRenderedSec":1,"CompositionDirtyGeneratedSec":1,"CompositionDirtyPropagatedSec":1,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":266,"EventSequence":18}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe?diagnosticdataviewer.exe?
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T11:04:00.1437812Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"AF204CB1-E52C-4D98-A98B-14FC7B12325E","flags":469762632,"epoch":"1107239","seq":294},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe!App","ver":"4.2007.11582.0_x64_!2021/06/07:23:14:10!0!diagnosticdataviewer.exe","asId":647},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"U:Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe!App","AppVersion":"4.2007.11582.0_x64_!2021/06/07:23:14:10!0!diagnosticdataviewer.exe","CommandLineHash":1917871534,"AppSessionId":"0000154C-0002-000B-DCDA-079D2094D701","AggregationStartTime":"2021-08-18T11:02:34.0862867Z","AggregationDurationMS":88422,"InFocusDurationMS":59516,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":59516,"UserOrDisplayActiveDurationMS":59516,"UserActiveTransitionCount":0,"InFocusBitmap":"0x1E00000000000000","InputSec":46,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":46,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1216,"WindowHeight":941,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":3,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":647,"CompositionRenderedSec":54,"CompositionDirtyGeneratedSec":54,"CompositionDirtyPropagatedSec":54,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":32,"SinceFirstInteractivityMS":59813,"EventSequence":19}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-19T08:20:41.3580539Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":25},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":19},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":1,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-19T08:20:41.3584452Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":26},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":19},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":6,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:20:41.4317224Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0001-2911-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":27},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":5,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":33006,"GPUDeviceID":48879,"SubVendorID":5549,"SubSystemID":1029,"GPURevisionID":0,"DriverVersion":"10.0.19041.868","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16457734,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":true,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":10,"IsRemovable":false,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":19906,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":1,"NumVidPnTargets":1,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_65ab9a260dbf7467\\BasicDisplay.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794020353,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":0}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:20:41.4317321Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0001-2911-3105D394D701","eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":28},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":2,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#4&17f0ff54&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":0,"DisplayAdapterLuid":19906,"AdapterInterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Upfc.UpfcLaunchResult
logging_binary_name: upfc.exe
friendly_logging_binary_name: Updateability From SCM
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Upfc.UpfcLaunchResult","time":"2021-08-19T08:21:01.9315261Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":29},"metadata":{"f":{"hResult":2},"privTags":16777216},"mscv":{"cV":"tQjavlUBRUqVD23SxudTcw.0.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00002497169c13b0ba46a6be8a1fe493b250094079b7!upfc.exe","ver":"1973/05/29:11:25:14!232CA!upfc.exe","asId":35},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"name":"SIH","hResult":0}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Upfc.UpfcCompleted
logging_binary_name: upfc.exe
friendly_logging_binary_name: Updateability From SCM
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Upfc.UpfcCompleted","time":"2021-08-19T08:21:01.9317690Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":30},"metadata":{"f":{"waasMedicPreviousBlackoutStartTime":9,"waasMedicNewBlackoutStartTime":9,"waasMedicPreviousBlackoutEndTime":9,"waasMedicNewBlackoutEndTime":9,"waasMedicPreviousCadenceBlockStartTime":9,"waasMedicNewCadenceBlockStartTime":9,"waasMedicPreviousCadenceBlockEndTime":9,"waasMedicNewCadenceBlockEndTime":9,"hrWaasMedicLaunch":2,"hrSihLaunch":2,"hResult":2},"privTags":16777216},"mscv":{"cV":"tQjavlUBRUqVD23SxudTcw.0.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00002497169c13b0ba46a6be8a1fe493b250094079b7!upfc.exe","ver":"1973/05/29:11:25:14!232CA!upfc.exe","asId":35},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"launchtype":"Boot","isWaasMedicBlocked":true,"waasMedicBlockReason":"CadenceBlockTimeDidNotExpire","waasMedicBlackoutTimeExists":true,"waasMedicBlackoutTimeExpired":true,"waasMedicPreviousBlackoutStartTime":"2021-08-04T02:26:43.0000000Z","waasMedicNewBlackoutStartTime":"2021-08-04T02:26:43.0000000Z","waasMedicPreviousBlackoutEndTime":"2021-08-11T02:26:43.0000000Z","waasMedicNewBlackoutEndTime":"2021-08-11T02:26:43.0000000Z","waasMedicCadenceBlockTimeExists":true,"waasMedicCadenceBlockTimeExpired":false,"waasMedicPreviousCadenceBlockStartTime":"2021-08-16T21:53:27.0000000Z","waasMedicNewCadenceBlockStartTime":"2021-08-16T21:53:27.0000000Z","waasMedicPreviousCadenceBlockEndTime":"2021-08-23T21:53:27.0000000Z","waasMedicNewCadenceBlockEndTime":"2021-08-23T21:53:27.0000000Z","hrWaasMedicLaunch":0,"isSihBlocked":false,"sihBlockReason":"Unknown","hrSihLaunch":0,"hResult":0}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.TaskRun
logging_binary_name: sihclient.exe
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.TaskRun","time":"2021-08-19T08:21:02.2030784Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":31},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8}},"mscv":{"cV":"tQjavlUBRUqVD23SxudTcw.0.1.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00003b38dcc868d30a4489192c927fbec5327196bdd6!sihclient.exe","ver":"2000/07/06:02:35:17!5E1D9!sihclient.exe","asId":85},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","CallerApplicationName":"SIH","CmdLineArgs":"/cv tQjavlUBRUqVD23SxudTcw.0.1 ","EventInstanceID":"F4020B1C-6551-46BB-B85C-F40E02C39627","ServiceGuid":"E7A50285-D08D-499D-9FF8-180FDC2332BC","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: sihclient.exe
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:21:05.2087729Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":32},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8}},"mscv":{"cV":"tQjavlUBRUqVD23SxudTcw.0.1.2"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00003b38dcc868d30a4489192c927fbec5327196bdd6!sihclient.exe","ver":"2000/07/06:02:35:17!5E1D9!sihclient.exe","asId":85},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","CallerApplicationName":"SIHScheduled","TargetMetadataVersion":"","EventInstanceID":"F4020B1C-6551-46BB-B85C-F40E02C39627","ServiceGuid":"E7A50285-D08D-499D-9FF8-180FDC2332BC","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: sihclient.exe
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:21:05.2087797Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":33},"metadata":{"f":{"StatusCode":2,"EventInstanceID":8,"ServiceGuid":8}},"mscv":{"cV":"tQjavlUBRUqVD23SxudTcw.0.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00003b38dcc868d30a4489192c927fbec5327196bdd6!sihclient.exe","ver":"2000/07/06:02:35:17!5E1D9!sihclient.exe","asId":85},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","StatusCode":2379777,"CallerApplicationName":"SIHScheduled","TargetMetadataVersion":"","ApplicableUpdateInfo":"","CachedEngineVersion":"","EventInstanceID":"F4020B1C-6551-46BB-B85C-F40E02C39627","ServiceGuid":"E7A50285-D08D-499D-9FF8-180FDC2332BC","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.TaskRun
logging_binary_name: sihclient.exe
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.TaskRun","time":"2021-08-19T08:21:05.2087850Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":34},"metadata":{"f":{"StatusCode":2,"EventInstanceID":8,"ServiceGuid":8}},"mscv":{"cV":"tQjavlUBRUqVD23SxudTcw.0.1.4"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00003b38dcc868d30a4489192c927fbec5327196bdd6!sihclient.exe","ver":"2000/07/06:02:35:17!5E1D9!sihclient.exe","asId":85},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Completed","StatusCode":2379777,"CallerApplicationName":"SIH","CmdLineArgs":"/cv tQjavlUBRUqVD23SxudTcw.0.1 ","EventInstanceID":"F4020B1C-6551-46BB-B85C-F40E02C39627","ServiceGuid":"E7A50285-D08D-499D-9FF8-180FDC2332BC","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:21:39.4532335Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1008730696,"epoch":"1205429","seq":35},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_MOUSE","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":92171,"deviceTimeSinceLastReadEndMs":92171,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:21:39.4548109Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1008730696,"epoch":"1205429","seq":36},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_KEYBOARD","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":92171,"deviceTimeSinceLastReadEndMs":92171,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:21:39.6176581Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0001-6F11-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":37},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":6,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":261230,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":0,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":20085}}


sid: S-1-5-90-0-2
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:21:39.7252423Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":742392392,"epoch":"1205429","seq":38},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:FF7EF2A6-397B-0761-AD31-461D99B373D2"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:21:40.0787549Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0001-8511-3105D394D701","eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":39},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":3,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":0,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":261230,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.CredProvDataModel.SignedInCredProv
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.CredProvDataModel.SignedInCredProv","time":"2021-08-19T08:21:40.5745929Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":40},"metadata":{"f":{"ntsStatus":2,"ntsSubstatus":2},"privTags":50331648},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":91},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"credProviderGuid":"{60B78E88-EAD8-445C-9CFD-0B87F74EA6CD}","userType":1,"logonUiReason":0,"credProvScenario":0,"ntsStatus":0,"ntsSubstatus":0}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo
logging_binary_name: svchost_?AudioEndpointBuilder.dll?
friendly_logging_binary_name: Windows Audio Endpoint Builder
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo","time":"2021-08-19T08:21:40.8662355Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":41},"metadata":{"f":{"ContainerId":8,"streamEffectClsid":8,"modeEffectClsid":8,"endpointEffectClsid":8,"localEffectClsid":8,"globalEffectClsid":8,"MicArrayGeometry":{"f":{"usFrequencyBandHi":2,"usFrequencyBandLo":2,"usMicArrayType":2,"usNumberOfMicrophones":2,"usVersion":2,"wHorizontalAngleBegin":2,"wHorizontalAngleEnd":2,"wVerticalAngleBegin":2,"wVerticalAngleEnd":2}}},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":47},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"endpointInstanceId":"SWD\\MMDEVAPI\\{3.0.0.00000002}.{6C26BA7D-F0B2-4225-B422-8168C5261E45}","HWID":"","DeviceInstanceId":"","BusEnumeratorName":"","EndpointDevnodeId":"","EndpointFormFactor":0,"JackSubType":"","endpointID":"{6C26BA7D-F0B2-4225-B422-8168C5261E45}","IsBluetooth":0,"IsUSB":0,"IsSideband":0,"ContainerId":"00000000-0000-0000-0000-000000000000","Flow":0,"streamEffectClsid":"00000000-0000-0000-0000-000000000000","streamEffectModule":"","modeEffectClsid":"00000000-0000-0000-0000-000000000000","modeEffectModule":"","endpointEffectClsid":"00000000-0000-0000-0000-000000000000","endpointEffectModule":"","localEffectClsid":"00000000-0000-0000-0000-000000000000","localEffectModule":"","globalEffectClsid":"00000000-0000-0000-0000-000000000000","globalEffectModule":"","MicArrayGeometry":{"usFrequencyBandHi":0,"usFrequencyBandLo":0,"usMicArrayType":0,"usNumberOfMicrophones":0,"usVersion":0,"wHorizontalAngleBegin":0,"wHorizontalAngleEnd":0,"wVerticalAngleBegin":0,"wVerticalAngleEnd":0,"MicCoords":[]},"persistentId":"","isFarField":0,"AudioPosture - Supported":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Shell.Desktop.LogonFramework.AllLogonTasks
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Shell.Desktop.LogonFramework.AllLogonTasks","time":"2021-08-19T08:21:42.4989903Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0001-A312-3105D394D701","op":1,"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":43},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":110},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"wilActivity":{"threadId":4956},"logonTypeFlags":0,"logonOptimizationFlags":495,"isMSA":false,"isDomainUser":false,"isAadUser":false,"systemManufacturer":"innotek GmbH","systemProductName":"VirtualBox"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.EnabledBehaviors
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.EnabledBehaviors","time":"2021-08-19T08:21:43.0809324Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":44},"metadata":{"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":110},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Behaviors":"StartUninstallPrepBehavior, UninstallPrepCompleteBehavior, BootHolographicShellBehavior, LaunchViewerWindowBehavior, ShutdownHolographicShellBehavior, SuspendHolographicShellBehavior, ResumeHolographicShellBehavior, WNFDisplayContextBehavior, WNFInputContextBehavior, StartUserIdleTimerBehavior, StopUserIdleTimerBehavior, DelayedInitializationBehavior, NotifyHolographicForegroundLostBehavior, PauseHolographicDisplayBehavior, ResumeHolographicDisplayBehavior, ReleaseHolographicDisplayBehavior, RunBenchmarkBehavior, SetIPDBehavior, "}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated","time":"2021-08-19T08:21:43.5707113Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":45},"metadata":{"f":{"HmdState":2,"HoloShellReady":2,"HolographicComponentsLoaded":2,"HolographicDisplayState":2,"BenchmarkRequestState":2,"HolographicStateChangeRequest":2,"UninstallState":2,"SessionIdleFlags":2},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":110},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"HmdState":0,"SimulationEnabled":0,"FirstRunSucceeded":0,"ViewerAppRunning":0,"HoloShellReady":3,"HolographicComponentsLoaded":0,"HolographicDisplayState":0,"BenchmarkRequestState":0,"HolographicStateChangeRequest":0,"HolographicAppInForeground":0,"UninstallState":0,"SystemStandby":0,"SessionIdleFlags":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated2
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated2","time":"2021-08-19T08:21:43.5707136Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":46},"metadata":{"f":{"DependencyState":2,"SubscriptionState":2,"RetailDemoState":2},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":110},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"HmdEnumerationComplete":0,"UserIdleTimerExpired":0,"DependencyState":0,"DependencyRecoveryRequired":0,"CompositorAvailable":0,"SystemIsOnDefaultDesktop":1,"PendingHmdIdleTimerReset":0,"SubscriptionState":1,"DisplaysAllowIdleTimer":1,"HolographicDriverDetected":0,"RetailDemoState":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.RaiseStatusChanged
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.RaiseStatusChanged","time":"2021-08-19T08:21:43.5707149Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":47},"metadata":{"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":110},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"SysHolographicWindowingEnvironmentState":0,"StatusCode":15,"SubstatusCode":4}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated","time":"2021-08-19T08:21:43.5708776Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":48},"metadata":{"f":{"HmdState":2,"HoloShellReady":2,"HolographicComponentsLoaded":2,"HolographicDisplayState":2,"BenchmarkRequestState":2,"HolographicStateChangeRequest":2,"UninstallState":2,"SessionIdleFlags":2},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":110},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"HmdState":0,"SimulationEnabled":0,"FirstRunSucceeded":0,"ViewerAppRunning":0,"HoloShellReady":3,"HolographicComponentsLoaded":0,"HolographicDisplayState":0,"BenchmarkRequestState":0,"HolographicStateChangeRequest":0,"HolographicAppInForeground":0,"UninstallState":0,"SystemStandby":0,"SessionIdleFlags":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated2
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Holographic.Coordinator.SystemStateUpdated2","time":"2021-08-19T08:21:43.5708788Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":49},"metadata":{"f":{"DependencyState":2,"SubscriptionState":2,"RetailDemoState":2},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":110},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"HmdEnumerationComplete":1,"UserIdleTimerExpired":0,"DependencyState":0,"DependencyRecoveryRequired":0,"CompositorAvailable":0,"SystemIsOnDefaultDesktop":1,"PendingHmdIdleTimerReset":0,"SubscriptionState":1,"DisplaysAllowIdleTimer":1,"HolographicDriverDetected":0,"RetailDemoState":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Shell.Desktop.LogonFramework.AllLogonTasks
logging_binary_name: explorer.exe
friendly_logging_binary_name: Windows Explorer
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Shell.Desktop.LogonFramework.AllLogonTasks","time":"2021-08-19T08:21:50.7947718Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0001-A312-3105D394D701","op":2,"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":50},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","ver":"1991/07/18:17:41:12!4A83CE!explorer.exe","asId":110},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"wilActivity":{"hresult":0,"threadId":5044},"logonTypeFlags":0,"logonOptimizationFlags":495,"isMSA":false,"isDomainUser":false,"isAadUser":false,"systemManufacturer":"innotek GmbH","systemProductName":"VirtualBox"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:21:51.6811458Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":51},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-19T08:21:51.7868502Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":52},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":91},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":5,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-19T08:21:51.7869669Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":53},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":91},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":1,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:21:52.0219514Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"974ADBDB-9EFC-4064-AD9E-077BDE5B562F","flags":469762632,"epoch":"1205429","seq":54},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":91},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","AppVersion":"2072/05/12:15:03:46!6F79!logonui.exe","CommandLineHash":3684698916,"AppSessionId":"0000050C-0002-000C-0B52-EA3BD394D701","AggregationStartTime":"2021-08-19T08:21:39.4412388Z","AggregationDurationMS":12579,"InFocusDurationMS":11453,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":11453,"UserOrDisplayActiveDurationMS":11453,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":4,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":4,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1280,"WindowHeight":1024,"MonitorWidth":1280,"MonitorHeight":1024,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":91,"CompositionRenderedSec":12,"CompositionDirtyGeneratedSec":12,"CompositionDirtyPropagatedSec":12,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":11860,"EventSequence":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentManagementSDK.ReportRequestIds
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentManagementSDK.ReportRequestIds","time":"2021-08-19T08:22:43.5059816Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":55},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":150},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"adUnitId":"353694","adId":"94d8fcc54de54ec8d248b3818bccc394","region":"US","locale":"en-US","asid":"f96eba040a5740b8bf01156b4f30e9d9"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.FeatureExperiment.AggregatedStagingState
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.AggregatedStagingState","time":"2021-08-19T08:23:33.5551222Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":56},"metadata":{"privTags":2147483648},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":169},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Features":[{"featureId":18299130,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:117B97D4"},{"featureId":18973123,"hasTrigger":true,"state":2,"variant":1,"payload":177209344,"stateKind":4,"flightId":"FX:11C0E96C"},{"featureId":19638787,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:117B9872"},{"featureId":21969097,"hasTrigger":true,"state":2,"variant":1,"payload":33377331,"stateKind":4,"flightId":"FX:119E26AD"},{"featureId":23057458,"hasTrigger":false,"state":2,"variant":1,"payload":100663311,"stateKind":4,"flightId":"FX:11D5BFCD"},{"featureId":23531064,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11DF5B12"},{"featureId":24706693,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F41B68"},{"featureId":25330851,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DE505A"},{"featureId":27485177,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F1992A"},{"featureId":27919905,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C7EB6A"},{"featureId":28034939,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E50151"},{"featureId":28083526,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DB147C"},{"featureId":28170999,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C9408A"},{"featureId":28240882,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E11E97"},{"featureId":28260762,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C3F9D5"},{"featureId":28361144,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11D898D7"},{"featureId":28585361,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11FB0F2F"},{"featureId":28622680,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11CB9A9F"},{"featureId":28622690,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11C940DB"},{"featureId":28758888,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11CB9AC1"},{"featureId":29815990,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F4161E"},{"featureId":29932051,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E9EE98"},{"featureId":29984114,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E3E2BA"},{"featureId":32249103,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1201B330"},{"featureId":32315643,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1202B7FC"},{"featureId":32328375,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:120BB68E"},{"featureId":33588494,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:121A20E1"}]}}


sid: S-1-5-19
full_event_name: Microsoft.Windows.Security.WSC.EnableDefender
logging_binary_name: svchost_?SecurityCenterBroker.dll?
friendly_logging_binary_name: Security Center Broker
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.WSC.EnableDefender","time":"2021-08-19T08:23:36.4472413Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":57},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":148},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B723AA8B-7E0C-3EE6-7301-C51B07FA0714"},"loc":{"tz":"+10:00"}},"data":{"enable":true,"state":2,"reason":5,"defenderStatus":0}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig
logging_binary_name: ntoskrnl.exe
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig","time":"2021-08-19T08:25:15.2316727Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":58},"metadata":{"f":{"RebootRequiredReason":5,"InstallDate":9},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Legacy":false,"DeviceInstanceId":"TERMINPUT_BUS\\UMB\\2&2c22bcc9&0&Session3Keyboard0","DriverFlightIds":"","FirstHardwareId":"TS_INPT\\TS_KBD","LastCompatibleId":"TI_COMPAT_DEVICE","ClassGuid":"{4d36e96b-e325-11ce-bfc1-08002be10318}","DriverInfName":"termkbd.inf","DriverProvider":"Microsoft","DriverDate":"04/21/2009","DriverVersion":"10.0.19041.1","DriverSubmissionId":"","ExtensionDrivers":"","InboxDriver":1,"SetupMode":0,"NeedReboot":0,"RebootRequiredReason":0,"StatusCode":0,"InstallDate":"2021-08-19T08:25:15.2273497Z"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig
logging_binary_name: ntoskrnl.exe
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig","time":"2021-08-19T08:25:15.2353616Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":59},"metadata":{"f":{"RebootRequiredReason":5,"InstallDate":9},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Legacy":false,"DeviceInstanceId":"TERMINPUT_BUS\\UMB\\2&2c22bcc9&0&Session3Mouse0","DriverFlightIds":"","FirstHardwareId":"TS_INPT\\TS_MOU","LastCompatibleId":"TI_COMPAT_DEVICE","ClassGuid":"{4d36e96f-e325-11ce-bfc1-08002be10318}","DriverInfName":"termmou.inf","DriverProvider":"Microsoft","DriverDate":"04/21/2009","DriverVersion":"10.0.19041.1","DriverSubmissionId":"","ExtensionDrivers":"","InboxDriver":1,"SetupMode":0,"NeedReboot":0,"RebootRequiredReason":0,"StatusCode":0,"InstallDate":"2021-08-19T08:25:15.2273497Z"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig
logging_binary_name: ntoskrnl.exe
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig","time":"2021-08-19T08:25:15.4559762Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":60},"metadata":{"f":{"RebootRequiredReason":5,"InstallDate":9},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Legacy":false,"DeviceInstanceId":"SWD\\RemoteDisplayEnum\\RdpIdd_IndirectDisplay&SessionId_0003","DriverFlightIds":"","FirstHardwareId":"RdpIdd_IndirectDisplay","LastCompatibleId":"SWD\\Generic","ClassGuid":"{4d36e968-e325-11ce-bfc1-08002be10318}","DriverInfName":"rdpidd.inf","DriverProvider":"Microsoft","DriverDate":"06/21/2006","DriverVersion":"10.0.19041.662","DriverSubmissionId":"","ExtensionDrivers":"","InboxDriver":1,"SetupMode":0,"NeedReboot":0,"RebootRequiredReason":0,"StatusCode":0,"InstallDate":"2021-08-19T08:25:15.4542884Z"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:25:15.4865293Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":61},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_MOUSE","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":308203,"deviceTimeSinceLastReadEndMs":308203,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:25:15.4884139Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":62},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_KEYBOARD","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":308218,"deviceTimeSinceLastReadEndMs":308218,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:25:15.6640406Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0001-6326-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":63},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":7,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0003#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":850584,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":0,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":20085}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig
logging_binary_name: ntoskrnl.exe
friendly_logging_binary_name: NT Kernel & System
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Kernel.DeviceConfig.DeviceConfig","time":"2021-08-19T08:25:15.6931602Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":64},"metadata":{"f":{"RebootRequiredReason":5,"InstallDate":9},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Legacy":false,"DeviceInstanceId":"DISPLAY\\Default_Monitor\\1&31c5ecd4&0&UID256","DriverFlightIds":"","FirstHardwareId":"MONITOR\\Default_Monitor","LastCompatibleId":"*PNP09FF","ClassGuid":"{4d36e96e-e325-11ce-bfc1-08002be10318}","DriverInfName":"monitor.inf","DriverProvider":"Microsoft","DriverDate":"06/21/2006","DriverVersion":"10.0.19041.1151","DriverSubmissionId":"","ExtensionDrivers":"","InboxDriver":1,"SetupMode":0,"NeedReboot":0,"RebootRequiredReason":0,"StatusCode":0,"InstallDate":"2021-08-19T08:25:15.6871770Z"}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:25:15.6963827Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-9421-3105D394D701","eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":65},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":4,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":0,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&31c5ecd4&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":850584,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0003#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-90-0-3
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:25:15.9078782Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":742392392,"epoch":"1205429","seq":66},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":178},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:85FC64C5-F7F7-9836-D5FD-5C91E1CD577A"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.CredProvDataModel.SignedInCredProv
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.CredProvDataModel.SignedInCredProv","time":"2021-08-19T08:25:16.1599031Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":67},"metadata":{"f":{"ntsStatus":2,"ntsSubstatus":2},"privTags":50331648},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":177},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"credProviderGuid":"{60B78E88-EAD8-445C-9CFD-0B87F74EA6CD}","userType":1,"logonUiReason":0,"credProvScenario":0,"ntsStatus":0,"ntsSubstatus":0}}


sid: S-1-5-90-0-3
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:25:16.2629367Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":742392392,"epoch":"1205429","seq":68},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":178},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:85FC64C5-F7F7-9836-D5FD-5C91E1CD577A"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:25:16.5833705Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":69},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_MOUSE","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":309296,"deviceTimeSinceLastReadEndMs":309296,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:25:16.5834204Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":70},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_KEYBOARD","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":309296,"deviceTimeSinceLastReadEndMs":309296,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:25:16.6045915Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":71},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:25:16.8590307Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0001-0C27-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1205429","seq":72},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":8,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":877770,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":0,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":20085}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-19T08:25:16.8627282Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":73},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":177},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":5,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-19T08:25:16.8628536Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":74},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":177},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":1,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo
logging_binary_name: svchost_?AudioEndpointBuilder.dll?
friendly_logging_binary_name: Windows Audio Endpoint Builder
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo","time":"2021-08-19T08:25:16.8881704Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1205429","seq":75},"metadata":{"f":{"ContainerId":8,"streamEffectClsid":8,"modeEffectClsid":8,"endpointEffectClsid":8,"localEffectClsid":8,"globalEffectClsid":8,"MicArrayGeometry":{"f":{"usFrequencyBandHi":2,"usFrequencyBandLo":2,"usMicArrayType":2,"usNumberOfMicrophones":2,"usVersion":2,"wHorizontalAngleBegin":2,"wHorizontalAngleEnd":2,"wVerticalAngleBegin":2,"wVerticalAngleEnd":2}}},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":47},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"endpointInstanceId":"SWD\\MMDEVAPI\\{3.0.0.00000002}.{6C26BA7D-F0B2-4225-B422-8168C5261E45}","HWID":"","DeviceInstanceId":"","BusEnumeratorName":"","EndpointDevnodeId":"","EndpointFormFactor":0,"JackSubType":"","endpointID":"{6C26BA7D-F0B2-4225-B422-8168C5261E45}","IsBluetooth":0,"IsUSB":0,"IsSideband":0,"ContainerId":"00000000-0000-0000-0000-000000000000","Flow":0,"streamEffectClsid":"00000000-0000-0000-0000-000000000000","streamEffectModule":"","modeEffectClsid":"00000000-0000-0000-0000-000000000000","modeEffectModule":"","endpointEffectClsid":"00000000-0000-0000-0000-000000000000","endpointEffectModule":"","localEffectClsid":"00000000-0000-0000-0000-000000000000","localEffectModule":"","globalEffectClsid":"00000000-0000-0000-0000-000000000000","globalEffectModule":"","MicArrayGeometry":{"usFrequencyBandHi":0,"usFrequencyBandLo":0,"usMicArrayType":0,"usNumberOfMicrophones":0,"usVersion":0,"wHorizontalAngleBegin":0,"wHorizontalAngleEnd":0,"wVerticalAngleBegin":0,"wVerticalAngleEnd":0,"MicCoords":[]},"persistentId":"","isFarField":0,"AudioPosture - Supported":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:25:16.9801034Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":76},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


sid: S-1-5-18
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:25:17.0055387Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"AE7EDE5B-E445-481C-8592-087C4C7611E9","flags":469762632,"epoch":"1205429","seq":77},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":177},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","AppVersion":"2072/05/12:15:03:46!6F79!logonui.exe","CommandLineHash":2349852465,"AppSessionId":"00001B04-0003-000C-1F64-AFBCD394D701","AggregationStartTime":"2021-08-19T08:25:15.4670331Z","AggregationDurationMS":1515,"InFocusDurationMS":281,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":281,"UserOrDisplayActiveDurationMS":281,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":1,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":1,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1024,"WindowHeight":768,"MonitorWidth":1024,"MonitorHeight":768,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":177,"CompositionRenderedSec":1,"CompositionDirtyGeneratedSec":1,"CompositionDirtyPropagatedSec":1,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":797,"EventSequence":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:25:17.2021547Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-5B22-3105D394D701","eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":78},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":5,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":0,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":877770,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-18
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:25:18.8111745Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"57461EAB-1D8D-46EA-8C2B-FDDFFB45CB35","flags":469762632,"epoch":"1205429","seq":79},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","AppVersion":"1971/05/25:13:07:28!F55D!csrss.exe","CommandLineHash":3422062667,"AppSessionId":"00000FB4-0003-000C-FD80-66BCD394D701","AggregationStartTime":"2021-08-19T08:25:15.4670331Z","AggregationDurationMS":3328,"InFocusDurationMS":15,"FocusLostCount":2,"NewProcessCount":1,"UserActiveDurationMS":15,"UserOrDisplayActiveDurationMS":15,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":173,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":1,"CompositionDirtyPropagatedSec":1,"BackgroundMouseSec":2,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":3313,"EventSequence":3}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Shell.CortanaSearch.CortanaStartUpInfo
logging_binary_name: Microsoft.Windows.Search_1.14.2.19041_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Search
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Shell.CortanaSearch.CortanaStartUpInfo","time":"2021-08-19T08:25:43.3635436Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":80},"metadata":{"privTags":16777216},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.Search_1.14.2.19041_neutral_neutral_cw5n1h2txyewy!CortanaUI","ver":"1.14.2.19041_neutral_neutral!1990/06/05:02:31:08!348F80!searchapp.exe","asId":120},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"SessionId":"BFC9DDBCD6554FBEBBD0149FDD1EB84A","viewId":65950,"entryPoint":"WNSBOX","querySource":"TaskBarSearchBox","secondaryQuerySource":"","positioner":"desktop","coldStart":false,"ClientId":"FD133FDC639D4AE392D342EA16C9877E","launchImpression":"","targetView":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:25:52.0627313Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":81},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: consent.exe
friendly_logging_binary_name: Consent UI for administrative applications
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:25:54.1133701Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"D4257CEF-026F-4352-805E-9E4463D4D643","flags":469762632,"epoch":"1205429","seq":82},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001095bd4b63360fc2968d75622aa745e5523428ab!consent.exe","ver":"2095/01/28:21:50:05!379EA!consent.exe","asId":194},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001095bd4b63360fc2968d75622aa745e5523428ab!consent.exe","AppVersion":"2095/01/28:21:50:05!379EA!consent.exe","CommandLineHash":2518591086,"AppSessionId":"000006AC-0002-000C-56B3-4BD2D394D701","AggregationStartTime":"2021-08-19T08:21:39.4412388Z","AggregationDurationMS":254672,"InFocusDurationMS":2032,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":2032,"UserOrDisplayActiveDurationMS":2032,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0010000000000000","InputSec":1,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1024,"WindowHeight":768,"MonitorWidth":1024,"MonitorHeight":768,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":194,"CompositionRenderedSec":1,"CompositionDirtyGeneratedSec":1,"CompositionDirtyPropagatedSec":1,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":1647,"ViewFlags":0,"SinceFirstInteractivityMS":2047,"EventSequence":3}}


