# events_persisted

sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:40:34.8933967Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":690},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"13413ba5-1a88-41c6-bb54-e659e8ef2490","EventInfo.Level":3,"FrameId":13,"HttpStatusCode":200,"IsTopLevelUrl":1,"NavigationSource":0,"TabId":28,"Timestamp":"2021-08-17T11:40:34.892Z","client_id":-8972017550787008273,"navigationUrl":"https://ntp.msn.com/edge/ntp?locale=en-US&title=New%20tab&fre=1&dsp=1&sp=Bing&prerender=1","navigationUrlRejectCode":0,"payload_id":34359738369,"pop_sample":100,"referUrl":"","referUrlRejectCode":107,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-17T11:40:35.2544466Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":691},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"be58a459-e14a-46a7-a58c-3114f47528c5","EventInfo.Level":3,"FrameId":16,"IsTopLevelUrl":0,"TabId":25,"Timestamp":"2021-08-17T11:40:35.253Z","client_id":-8972017550787008273,"navigationUrl":"","navigationUrlRejectCode":19,"payload_id":34359738369,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:40:35.2545057Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":692},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"be58a459-e14a-46a7-a58c-3114f47528c5","EventInfo.Level":3,"FrameId":16,"HttpStatusCode":-1,"IsTopLevelUrl":0,"NavigationSource":3,"TabId":25,"Timestamp":"2021-08-17T11:40:35.253Z","client_id":-8972017550787008273,"navigationUrl":"","navigationUrlRejectCode":19,"payload_id":34359738369,"pop_sample":100,"referUrl":"","referUrlRejectCode":107,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-17T11:40:37.2560344Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":693},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"9771b30b-e222-4b90-8778-b75d1a104b39","EventInfo.Level":3,"FrameId":18,"IsTopLevelUrl":0,"TabId":2,"Timestamp":"2021-08-17T11:40:37.255Z","client_id":-8972017550787008273,"navigationUrl":"","navigationUrlRejectCode":19,"payload_id":34359738369,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:40:37.2562573Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":694},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"9771b30b-e222-4b90-8778-b75d1a104b39","EventInfo.Level":3,"FrameId":18,"HttpStatusCode":-1,"IsTopLevelUrl":0,"NavigationSource":3,"TabId":2,"Timestamp":"2021-08-17T11:40:37.255Z","client_id":-8972017550787008273,"navigationUrl":"","navigationUrlRejectCode":19,"payload_id":34359738369,"pop_sample":100,"referUrl":"","referUrlRejectCode":107,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-17T11:40:37.2762569Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":695},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"9771b30b-e222-4b90-8778-b75d1a104b39","EventInfo.Level":3,"FrameId":18,"IsTopLevelUrl":0,"TabId":2,"Timestamp":"2021-08-17T11:40:37.267Z","client_id":-8972017550787008273,"navigationUrl":"https://www.facebook.com/tr/","navigationUrlRejectCode":0,"payload_id":34359738369,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:40:37.2977933Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":696},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"9771b30b-e222-4b90-8778-b75d1a104b39","EventInfo.Level":3,"FrameId":18,"HttpStatusCode":200,"IsTopLevelUrl":0,"NavigationSource":3,"TabId":2,"Timestamp":"2021-08-17T11:40:37.296Z","client_id":-8972017550787008273,"navigationUrl":"https://www.facebook.com/tr/","navigationUrlRejectCode":0,"payload_id":34359738369,"pop_sample":100,"referUrl":"https://www.fireeye.com/","referUrlRejectCode":0,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-17T11:40:38.5166625Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":697},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"10683ccc-2a6b-42d8-9472-231ba4db927d","EventInfo.Level":3,"FrameId":21,"IsTopLevelUrl":0,"TabId":26,"Timestamp":"2021-08-17T11:40:38.512Z","client_id":-8972017550787008273,"navigationUrl":"https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdTmM4aAAAAAG9qp7C4Y9cHA1ijTnn-pb9lM3BU&co=aHR0cHM6Ly93d3cuY2FyYm9uYmxhY2suY29tOjQ0Mw..&hl=en&v=JF4U2g-hvLrBJ_UxdbKj92gN&size=invisible&cb=figb9b82tis0","navigationUrlRejectCode":0,"payload_id":34359738369,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:40:38.7451521Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":698},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"10683ccc-2a6b-42d8-9472-231ba4db927d","EventInfo.Level":3,"FrameId":21,"HttpStatusCode":200,"IsTopLevelUrl":0,"NavigationSource":3,"TabId":26,"Timestamp":"2021-08-17T11:40:38.743Z","client_id":-8972017550787008273,"navigationUrl":"https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdTmM4aAAAAAG9qp7C4Y9cHA1ijTnn-pb9lM3BU&co=aHR0cHM6Ly93d3cuY2FyYm9uYmxhY2suY29tOjQ0Mw..&hl=en&v=JF4U2g-hvLrBJ_UxdbKj92gN&size=invisible&cb=figb9b82tis0","navigationUrlRejectCode":0,"payload_id":34359738369,"pop_sample":100,"referUrl":"https://www.carbonblack.com/","referUrlRejectCode":0,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-17T11:40:38.8694956Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":699},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"10683ccc-2a6b-42d8-9472-231ba4db927d","EventInfo.Level":3,"FrameId":22,"IsTopLevelUrl":0,"TabId":26,"Timestamp":"2021-08-17T11:40:38.868Z","client_id":-8972017550787008273,"navigationUrl":"","navigationUrlRejectCode":19,"payload_id":34359738369,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:40:38.8696303Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":700},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"10683ccc-2a6b-42d8-9472-231ba4db927d","EventInfo.Level":3,"FrameId":22,"HttpStatusCode":-1,"IsTopLevelUrl":0,"NavigationSource":3,"TabId":26,"Timestamp":"2021-08-17T11:40:38.868Z","client_id":-8972017550787008273,"navigationUrl":"","navigationUrlRejectCode":19,"payload_id":34359738369,"pop_sample":100,"referUrl":"","referUrlRejectCode":107,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_W3cNavTiming
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_W3cNavTiming","time":"2021-08-17T11:40:44.3387690Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":701},"metadata":{"f":{"Channel":4,"ComulativeLayoutShift":6,"EffectiveConnectionType":4,"EventInfo.Level":4,"FirstContentfulPaint":6,"FirstInputDelay":6,"LargestContentfulPaint":6,"TabId":4,"client_id":4,"connectEnd":6,"connectStart":6,"domComplete":6,"domContentLoadedEnd":6,"domContentLoadedStart":6,"domInteractive":6,"domainLookupEnd":6,"domainLookupStart":6,"downlink":4,"fetchStart":6,"httpRtt":4,"loadEventEnd":6,"loadEventStart":6,"payload_id":4,"pop_sample":6,"redirectEnd":6,"redirectStart":6,"requestStart":6,"responseEnd":6,"responseStart":6,"transportRtt":4,"unloadEventEnd":6,"unloadEventStart":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:ComulativeLayoutShift;t:3","n:EffectiveConnectionType;t:2","n:EventInfo.Level;t:2","n:FirstContentfulPaint;t:3","n:FirstInputDelay;t:3","n:LargestContentfulPaint;t:3","n:StartedInForeground;t:1","n:TabId;t:2","n:client_id;t:2","n:connectEnd;t:3","n:connectStart;t:3","n:domComplete;t:3","n:domContentLoadedEnd;t:3","n:domContentLoadedStart;t:3","n:domInteractive;t:3","n:domainLookupEnd;t:3","n:domainLookupStart;t:3","n:downlink;t:2","n:fetchStart;t:3","n:httpRtt;t:2","n:loadEventEnd;t:3","n:loadEventStart;t:3","n:payload_id;t:2","n:pop_sample;t:3","n:redirectEnd;t:3","n:redirectStart;t:3","n:requestStart;t:3","n:responseEnd;t:3","n:responseStart;t:3","n:transportRtt;t:2","n:unloadEventEnd;t:3","n:unloadEventStart;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ComulativeLayoutShift":0.00064595503499731421,"ConnectionType":"Ethernet","CorrelationGuid":"918ff2bf-df21-42fc-a210-74b9a84a0575","EffectiveConnectionType":6,"EventInfo.Level":3,"FirstContentfulPaint":251,"FirstInputDelay":-1,"LargestContentfulPaint":332,"StartedInForeground":1,"TabId":27,"Timestamp":"2021-08-17T11:40:44.337Z","client_id":-8972017550787008273,"connectEnd":4,"connectStart":4,"domComplete":240,"domContentLoadedEnd":240,"domContentLoadedStart":240,"domInteractive":-1,"domainLookupEnd":4,"domainLookupStart":4,"downlink":1456,"fetchStart":4,"httpRtt":90,"loadEventEnd":294,"loadEventStart":293,"payload_id":34359738369,"pop_sample":100,"redirectEnd":-1,"redirectStart":-1,"requestStart":5,"responseEnd":30,"responseStart":28,"transportRtt":33,"unloadEventEnd":-1,"unloadEventStart":-1,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:40:44.9567563Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"DF4E3789-847D-4F47-8F01-E81E638B900A","flags":469762632,"epoch":"1000837","seq":702},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":969},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","AppVersion":"2021/08/11:22:26:42!337369!msedge.exe","CommandLineHash":78820027,"AppSessionId":"00001AB8-0001-000A-BA77-2FAD5C93D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":859860,"InFocusDurationMS":12578,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":12578,"UserOrDisplayActiveDurationMS":12578,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000000000040000","InputSec":2,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":2,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":825,"WindowHeight":990,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":969,"CompositionRenderedSec":13,"CompositionDirtyGeneratedSec":14,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":16282,"EventSequence":67}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: openwith.exe
friendly_logging_binary_name: Pick an app
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:41:37.8692434Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"157470AB-F0A9-433A-95A1-81541F2B4B19","flags":469762632,"epoch":"1000837","seq":703},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000029efbc22884147f29760e9a4d21758629fd6b507!openwith.exe","ver":"2064/12/07:03:53:21!2DE62!openwith.exe","asId":1023},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!000029efbc22884147f29760e9a4d21758629fd6b507!openwith.exe","AppVersion":"2064/12/07:03:53:21!2DE62!openwith.exe","CommandLineHash":3886542329,"AppSessionId":"000023EC-0001-000A-A83F-10D25C93D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":912766,"InFocusDurationMS":7265,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":7265,"UserOrDisplayActiveDurationMS":7265,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000000000200000","InputSec":4,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":4,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":392,"WindowHeight":249,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1023,"CompositionRenderedSec":3,"CompositionDirtyGeneratedSec":3,"CompositionDirtyPropagatedSec":3,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":4422,"EventSequence":68}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816272Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"87E968D7-1208-462F-9355-C86BFEC39E3E","flags":469762632,"epoch":"1000837","seq":704},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a50456e145e66eb3755e56c8b8c5789abb339490!explorer.exe","AppVersion":"1991/07/18:17:41:12!4A83CE!explorer.exe","CommandLineHash":2376842926,"AppSessionId":"00001044-0001-000A-D671-843C3593D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":12450,"FocusLostCount":17,"NewProcessCount":0,"UserActiveDurationMS":12450,"UserOrDisplayActiveDurationMS":12450,"UserActiveTransitionCount":0,"InFocusBitmap":"0x330F010000000008","InputSec":22,"KeyboardInputSec":9,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":14,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":91,"CompositionRenderedSec":301,"CompositionDirtyGeneratedSec":238,"CompositionDirtyPropagatedSec":47,"BackgroundMouseSec":58,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":17311391,"EventSequence":69}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816310Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"E1617ECA-BE13-45DD-B0CE-22A212175474","flags":469762632,"epoch":"1000837","seq":705},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!00005f2596b6c147e13a32c7d73ef1c1365ba0171687!powershell_ise.exe","AppVersion":"2103/02/21:08:22:01!35D26!powershell_ise.exe","CommandLineHash":1548197259,"AppSessionId":"00001564-0001-000A-C78A-92214493D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":620016,"FocusLostCount":12,"NewProcessCount":0,"UserActiveDurationMS":620016,"UserOrDisplayActiveDurationMS":620016,"UserActiveTransitionCount":0,"InFocusBitmap":"0x2000C0FF7FFFFF0F","InputSec":336,"KeyboardInputSec":272,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":73,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1512,"WindowHeight":888,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":8,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":373,"CompositionRenderedSec":691,"CompositionDirtyGeneratedSec":596,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":37,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":10914953,"EventSequence":71}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816336Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"1234B4B0-7446-4854-A837-FBCA34CA6F99","flags":469762632,"epoch":"1000837","seq":706},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000d4f2663aabc03478975382b3c69f24b3c6bd2aa9!regedit.exe","AppVersion":"2061/08/30:23:53:43!5D8CD!regedit.exe","CommandLineHash":239139289,"AppSessionId":"00001EC0-0001-000A-C2BD-9BBB4693D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":6875,"FocusLostCount":1,"NewProcessCount":0,"UserActiveDurationMS":6875,"UserOrDisplayActiveDurationMS":6875,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":5,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":5,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1260,"WindowHeight":737,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":457,"CompositionRenderedSec":20,"CompositionDirtyGeneratedSec":6,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":6,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":9796422,"EventSequence":72}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816354Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"D3C3B741-F62F-42B3-9EBC-309AAA6CD192","flags":469762632,"epoch":"1000837","seq":707},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000c313e591b29d8be1cbe3809826a6a8647314698e!conhost.exe","AppVersion":"2017/11/03:09:20:41!D8A8E!conhost.exe","CommandLineHash":4018159560,"AppSessionId":"000017A0-0001-000A-F550-4B024593D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":31016,"FocusLostCount":4,"NewProcessCount":0,"UserActiveDurationMS":31016,"UserOrDisplayActiveDurationMS":31016,"UserActiveTransitionCount":0,"InFocusBitmap":"0x3303000000000000","InputSec":23,"KeyboardInputSec":12,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":13,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":993,"WindowHeight":519,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":440,"CompositionRenderedSec":30,"CompositionDirtyGeneratedSec":20,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":10537609,"EventSequence":73}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816368Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"61AAE805-8C3E-41AE-B56A-CB37A040F658","flags":469762632,"epoch":"1000837","seq":708},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"U:Microsoft.Windows.Search_1.14.2.19041_neutral_neutral_cw5n1h2txyewy!CortanaUI","AppVersion":"1.14.2.19041_neutral_neutral!1990/06/05:02:31:08!348F80!searchapp.exe","CommandLineHash":3630742416,"AppSessionId":"000010F4-0001-000A-231D-FD3E3593D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":3454,"FocusLostCount":1,"NewProcessCount":0,"UserActiveDurationMS":3454,"UserOrDisplayActiveDurationMS":3454,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0200000000000000","InputSec":2,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":2,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":784,"WindowHeight":680,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":101,"CompositionRenderedSec":3,"CompositionDirtyGeneratedSec":4,"CompositionDirtyPropagatedSec":3,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":17308766,"EventSequence":74}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816384Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"2A602205-E3DA-4C38-B499-493583D065F4","flags":469762632,"epoch":"1000837","seq":709},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"U:windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel","AppVersion":"10.0.2.1000_neutral_neutral!2009/09/05:02:35:46!1BCAE!systemsettings.exe","CommandLineHash":3808747423,"AppSessionId":"00001504-0001-000A-6C23-14C75A93D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":123656,"FocusLostCount":6,"NewProcessCount":1,"UserActiveDurationMS":123656,"UserOrDisplayActiveDurationMS":123656,"UserActiveTransitionCount":0,"InFocusBitmap":"0xFE07000000000000","InputSec":85,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":84,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1144,"WindowHeight":842,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":605,"CompositionRenderedSec":222,"CompositionDirtyGeneratedSec":129,"CompositionDirtyPropagatedSec":129,"BackgroundMouseSec":28,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":32,"SinceFirstInteractivityMS":1189109,"EventSequence":75}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816404Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"D9B9136E-291F-4ECF-9933-6503E9FAFD6E","flags":469762632,"epoch":"1000837","seq":710},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","AppVersion":"2061/09/02:00:04:16!18B14!applicationframehost.exe","CommandLineHash":4065513024,"AppSessionId":"000008F4-0001-000A-0F33-48693593D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":889,"FocusLostCount":14,"NewProcessCount":0,"UserActiveDurationMS":889,"UserOrDisplayActiveDurationMS":889,"UserActiveTransitionCount":0,"InFocusBitmap":"0xE207400000000008","InputSec":2,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":2,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1216,"WindowHeight":941,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":155,"CompositionRenderedSec":305,"CompositionDirtyGeneratedSec":31,"CompositionDirtyPropagatedSec":219,"BackgroundMouseSec":15,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":17237750,"EventSequence":76}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816419Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"5B05E1A8-20E7-4B06-B751-600980EA90AD","flags":469762632,"epoch":"1000837","seq":711},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"U:Microsoft.Windows.ShellExperienceHost_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","AppVersion":"10.0.19041.1023_neutral_neutral!2026/02/06:10:16:56!1A3E3E!shellexperiencehost.exe","CommandLineHash":319440979,"AppSessionId":"00001C64-0001-000A-D662-567D3593D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":0,"FocusLostCount":0,"NewProcessCount":0,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000000000000000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":174,"CompositionRenderedSec":1,"CompositionDirtyGeneratedSec":4,"CompositionDirtyPropagatedSec":2,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":2310,"ViewFlags":0,"SinceFirstInteractivityMS":17204234,"EventSequence":78}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816432Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"968EDAD1-5E47-4F52-B334-F953B8F3B502","flags":469762632,"epoch":"1000837","seq":712},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"U:Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe!App","AppVersion":"4.2007.11582.0_x64_!2021/06/07:23:14:10!0!diagnosticdataviewer.exe","CommandLineHash":1917871534,"AppSessionId":"00000E58-0001-000A-D5C6-58C35B93D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":28267,"FocusLostCount":4,"NewProcessCount":1,"UserActiveDurationMS":28267,"UserOrDisplayActiveDurationMS":28267,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000400000000018","InputSec":20,"KeyboardInputSec":4,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":16,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1216,"WindowHeight":941,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":812,"CompositionRenderedSec":103,"CompositionDirtyGeneratedSec":45,"CompositionDirtyPropagatedSec":45,"BackgroundMouseSec":2,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":32,"SinceFirstInteractivityMS":765891,"EventSequence":79}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: applicationframehost.exe
friendly_logging_binary_name: applicationframehost.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:41.9816447Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"C5DC0BEC-4F9D-445E-8CAD-85922669D13F","flags":469762632,"epoch":"1000837","seq":713},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001a32aba054084c253487db2318a0995963145a31!applicationframehost.exe","ver":"2061/09/02:00:04:16!18B14!applicationframehost.exe","asId":155},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","AppVersion":"2021/08/13:18:16:48!260996!chrome.exe","CommandLineHash":2956555754,"AppSessionId":"00000858-0001-000A-F0B4-D36D5D93D701","AggregationStartTime":"2021-08-17T11:26:25.0900431Z","AggregationDurationMS":1216891,"InFocusDurationMS":17672,"FocusLostCount":3,"NewProcessCount":1,"UserActiveDurationMS":17672,"UserOrDisplayActiveDurationMS":17672,"UserActiveTransitionCount":0,"InFocusBitmap":"0x000000000000000C","InputSec":10,"KeyboardInputSec":4,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":6,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1680,"WindowHeight":1050,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":6,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1025,"CompositionRenderedSec":17,"CompositionDirtyGeneratedSec":11,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":3,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":50016,"EventSequence":80}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Shell.CortanaSearch.CortanaStartUpInfo
logging_binary_name: Microsoft.Windows.Search_1.14.2.19041_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Search
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Shell.CortanaSearch.CortanaStartUpInfo","time":"2021-08-17T11:46:48.5645419Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":714},"metadata":{"privTags":16777216},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.Search_1.14.2.19041_neutral_neutral_cw5n1h2txyewy!CortanaUI","ver":"1.14.2.19041_neutral_neutral!1990/06/05:02:31:08!348F80!searchapp.exe","asId":101},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"SessionId":"1274CB991A7A4641B8FE33DF66FA009D","viewId":65942,"entryPoint":"WNSSTB","querySource":"StartButton","secondaryQuerySource":"","positioner":"desktop","coldStart":false,"ClientId":"FD133FDC639D4AE392D342EA16C9877E","launchImpression":"","targetView":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Taskmgr.EndTask
logging_binary_name: taskmgr.exe
friendly_logging_binary_name: Task Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Taskmgr.EndTask","time":"2021-08-17T11:46:55.2888661Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":715},"metadata":{"f":{"AppSessionGuid":8,"CPU":6,"Memory":6,"Disk":6,"Network":6,"GPU":6,"PowerUsage":6,"PowerUsageTrend":6,"EndTaskSessionGuid":8}},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a60eb3acf174c53043ffc1c222b639083906404b!taskmgr.exe","ver":"2063/07/05:07:57:35!131F97!taskmgr.exe","asId":1090},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppSessionGuid":"00001018-0001-000A-AC0F-166E5D93D701","TargetAppId":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","TargetAppVer":"2021/08/13:18:16:48!260996!chrome.exe","CommandLineHash":3534380954,"TargetAsId":1027,"Flags":1,"TaskType":"Background","CPU":0,"Memory":0.26959760188342324,"Disk":0,"Network":0,"GPU":0,"PowerUsage":0,"PowerUsageTrend":0,"Tab":"Minimalized","EndTaskSessionGuid":"00001018-0001-000A-AC0F-166E5D93D701"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Taskmgr.EndTask
logging_binary_name: taskmgr.exe
friendly_logging_binary_name: Task Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Taskmgr.EndTask","time":"2021-08-17T11:46:55.2899079Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":716},"metadata":{"f":{"AppSessionGuid":8,"CPU":6,"Memory":6,"Disk":6,"Network":6,"GPU":6,"PowerUsage":6,"PowerUsageTrend":6,"EndTaskSessionGuid":8}},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a60eb3acf174c53043ffc1c222b639083906404b!taskmgr.exe","ver":"2063/07/05:07:57:35!131F97!taskmgr.exe","asId":1090},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppSessionGuid":"00000A58-0001-000A-8879-1F6E5D93D701","TargetAppId":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","TargetAppVer":"2021/08/13:18:16:48!260996!chrome.exe","CommandLineHash":3826225974,"TargetAsId":1029,"Flags":1,"TaskType":"Background","CPU":0,"Memory":0.07953471095292873,"Disk":0,"Network":0,"GPU":0,"PowerUsage":0,"PowerUsageTrend":0,"Tab":"Minimalized","EndTaskSessionGuid":"00001018-0001-000A-AC0F-166E5D93D701"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Taskmgr.EndTask
logging_binary_name: taskmgr.exe
friendly_logging_binary_name: Task Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Taskmgr.EndTask","time":"2021-08-17T11:46:55.2910539Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":717},"metadata":{"f":{"AppSessionGuid":8,"CPU":6,"Memory":6,"Disk":6,"Network":6,"GPU":6,"PowerUsage":6,"PowerUsageTrend":6,"EndTaskSessionGuid":8}},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a60eb3acf174c53043ffc1c222b639083906404b!taskmgr.exe","ver":"2063/07/05:07:57:35!131F97!taskmgr.exe","asId":1090},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppSessionGuid":"00001AF8-0001-000A-FE23-306E5D93D701","TargetAppId":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","TargetAppVer":"2021/08/13:18:16:48!260996!chrome.exe","CommandLineHash":2664810874,"TargetAsId":1031,"Flags":1,"TaskType":"Background","CPU":0,"Memory":0.22564817853086175,"Disk":0,"Network":0,"GPU":0,"PowerUsage":0,"PowerUsageTrend":0,"Tab":"Minimalized","EndTaskSessionGuid":"00001018-0001-000A-AC0F-166E5D93D701"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Taskmgr.EndTask
logging_binary_name: taskmgr.exe
friendly_logging_binary_name: Task Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Taskmgr.EndTask","time":"2021-08-17T11:46:55.2918594Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":718},"metadata":{"f":{"AppSessionGuid":8,"CPU":6,"Memory":6,"Disk":6,"Network":6,"GPU":6,"PowerUsage":6,"PowerUsageTrend":6,"EndTaskSessionGuid":8}},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a60eb3acf174c53043ffc1c222b639083906404b!taskmgr.exe","ver":"2063/07/05:07:57:35!131F97!taskmgr.exe","asId":1090},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppSessionGuid":"00000858-0001-000A-F0B4-D36D5D93D701","TargetAppId":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","TargetAppVer":"2021/08/13:18:16:48!260996!chrome.exe","CommandLineHash":2956555754,"TargetAsId":1025,"Flags":1,"TaskType":"App","CPU":3.4179627251960851,"Memory":0.66404795509120407,"Disk":0.12055296290308469,"Network":0,"GPU":0,"PowerUsage":6.8479807466824791,"PowerUsageTrend":3.4300180214863936,"Tab":"Minimalized","EndTaskSessionGuid":"00001018-0001-000A-AC0F-166E5D93D701"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Taskmgr.CollectTrace
logging_binary_name: taskmgr.exe
friendly_logging_binary_name: Task Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Taskmgr.CollectTrace","time":"2021-08-17T11:46:55.2926117Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":719},"metadata":{"privTags":16777216},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a60eb3acf174c53043ffc1c222b639083906404b!taskmgr.exe","ver":"2063/07/05:07:57:35!131F97!taskmgr.exe","asId":1090},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"TraceType":"OneTrace","AppId":"chrome.exe"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: chrome.exe
friendly_logging_binary_name: Google Chrome
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:46:55.3205156Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"F0BEB41E-9587-4ECF-B3A1-AB211FA78D71","flags":469762632,"epoch":"1000837","seq":720},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","ver":"2021/08/13:18:16:48!260996!chrome.exe","asId":1025},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","AppVersion":"2021/08/13:18:16:48!260996!chrome.exe","CommandLineHash":2956555754,"AppSessionId":"00000858-0001-000A-F0B4-D36D5D93D701","AggregationStartTime":"2021-08-17T11:46:41.9813123Z","AggregationDurationMS":13328,"InFocusDurationMS":4609,"FocusLostCount":2,"NewProcessCount":0,"UserActiveDurationMS":4609,"UserOrDisplayActiveDurationMS":4609,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":4,"KeyboardInputSec":2,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":2,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1680,"WindowHeight":1050,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":7,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1025,"CompositionRenderedSec":10,"CompositionDirtyGeneratedSec":4,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":3,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":63344,"EventSequence":82}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: chrome.exe
friendly_logging_binary_name: Google Chrome
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:48:06.2682662Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"E3418430-BC16-4F85-A51E-3815C02674AD","flags":469762632,"epoch":"1000837","seq":721},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","ver":"2021/08/13:18:16:48!260996!chrome.exe","asId":1093},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","AppVersion":"2021/08/13:18:16:48!260996!chrome.exe","CommandLineHash":3151735924,"AppSessionId":"00000750-0001-000A-AAA0-68965D93D701","AggregationStartTime":"2021-08-17T11:46:41.9813123Z","AggregationDurationMS":84266,"InFocusDurationMS":61782,"FocusLostCount":3,"NewProcessCount":1,"UserActiveDurationMS":61782,"UserOrDisplayActiveDurationMS":61782,"UserActiveTransitionCount":0,"InFocusBitmap":"0x1F00000000000000","InputSec":10,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":10,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":825,"WindowHeight":990,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":7,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1093,"CompositionRenderedSec":13,"CompositionDirtyGeneratedSec":10,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":2,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":66266,"EventSequence":83}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: chrome.exe
friendly_logging_binary_name: Google Chrome
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:48:33.5335336Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"A1941538-8D2C-47EA-A90F-67EDE6EBBD5C","flags":469762632,"epoch":"1000837","seq":722},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","ver":"2021/08/13:18:16:48!260996!chrome.exe","asId":1111},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","AppVersion":"2021/08/13:18:16:48!260996!chrome.exe","CommandLineHash":2428372714,"AppSessionId":"00001100-0001-000A-E793-9FC95D93D701","AggregationStartTime":"2021-08-17T11:46:41.9813123Z","AggregationDurationMS":111531,"InFocusDurationMS":7625,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":7625,"UserOrDisplayActiveDurationMS":7625,"UserActiveTransitionCount":0,"InFocusBitmap":"0x2000000000000000","InputSec":2,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":2,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":825,"WindowHeight":990,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":7,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1111,"CompositionRenderedSec":7,"CompositionDirtyGeneratedSec":7,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":6953,"EventSequence":84}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_PageContentInfo
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_PageContentInfo","time":"2021-08-17T11:56:54.8898912Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":723},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"SimHash":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:SimHash;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":3,"ImageData":"1,11,8,1,/content/dam/fireeye-www/fw/images/fe-logo-color.svg\nD0,32,124,0,/content/dam/fireeye-www/home/images/thumbs/vision-12-thumbnail.jpg\n12E,C3,F5,131,/content/fireeye-www/en_US/index/_jcr_content/content-par/grid_100_edge_756839305/grid-100-full/grid_50_50_full/grid-50-right/highlight_tile/image.img.png/1611252628582.png\nF2,2C,1D4,361,/content/dam/fireeye-www/texture/tx-side-left-grey-05.png\n4D6,3C3,FFFF,80F,/content/fireeye-www/en_US/index/_jcr_content/content-par/grid_100_full_2077969794/grid-100-mid/image.img.png/1621443823353.png\n96,97,141,DD1,","SimHash":7718023153207900300,"TabId":2,"Timestamp":"2021-08-17T11:56:51.473Z","VideoData":"","client_id":-8972017550787008273,"navigationUrl":"https://www.fireeye.com/","navigationUrlRejectCode":0,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_PreferenceHomepageCurrent","time":"2021-08-17T11:56:54.8899619Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":724},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"HomepageCurrentRejectCode":4,"client_id":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":33554432},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:HomepageCurrentRejectCode;t:2","n:client_id;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","EventInfo.Level":2,"HomepageCurrentRejectCode":107,"HomepageCurrentUrl":"","Timestamp":"2021-08-17T11:56:46.626Z","client_id":-8972017550787008273,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 102 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_PreferenceDefaultSearchProviderCurrent","time":"2021-08-17T11:56:54.8900004Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":725},"metadata":{"f":{"Channel":4,"DSPCurrentRejectCode":4,"EventInfo.Level":4,"client_id":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":33554432},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:DSPCurrentRejectCode;t:2","n:EventInfo.Level;t:2","n:client_id;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","DSPCurrentRejectCode":0,"DSPCurrentUrl":"{bing:baseURL}search?q={searchTerms}&{bing:cvid}{bing:msb}{google:assistedQueryStats}","EventInfo.Level":2,"Timestamp":"2021-08-17T11:56:46.626Z","client_id":-8972017550787008273,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 115 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BrowserInfo
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BrowserInfo","time":"2021-08-17T11:56:54.8900356Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":726},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"client_id":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":2048},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:client_id;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","EventInfo.Level":2,"Language":"en-US","Timestamp":"2021-08-17T11:56:46.627Z","client_id":-8972017550787008273,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-17T11:56:54.8900725Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":727},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":3,"FrameId":1,"IsTopLevelUrl":1,"TabId":2,"Timestamp":"2021-08-17T11:56:46.691Z","client_id":-8972017550787008273,"navigationUrl":"https://www.fireeye.com/","navigationUrlRejectCode":0,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_HistoryAddUrl
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_HistoryAddUrl","time":"2021-08-17T11:56:54.8901109Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":728},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":3,"PageTitle":"","TabId":2,"Timestamp":"2021-08-17T11:56:47.265Z","client_id":-8972017550787008273,"navigationUrl":"https://www.fireeye.com/","navigationUrlRejectCode":0,"payload_id":47244640257,"pop_sample":100,"referUrl":"","referUrlRejectCode":107,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:56:54.8901499Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":729},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":3,"FrameId":1,"HttpStatusCode":200,"IsTopLevelUrl":1,"NavigationSource":6,"TabId":2,"Timestamp":"2021-08-17T11:56:47.265Z","client_id":-8972017550787008273,"navigationUrl":"https://www.fireeye.com/","navigationUrlRejectCode":0,"payload_id":47244640257,"pop_sample":100,"referUrl":"","referUrlRejectCode":107,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_HistoryAddUrlEx
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_HistoryAddUrlEx","time":"2021-08-17T11:56:54.8901809Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":730},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"TabId":4,"client_id":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":50331648},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:TabId;t:2","n:client_id;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":2,"PageTitle":"Cyber Security Experts & Solution Providers | FireEye","TabId":2,"Timestamp":"2021-08-17T11:56:47.274Z","client_id":-8972017550787008273,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-17T11:56:54.8902169Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":731},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":3,"FrameId":2,"IsTopLevelUrl":0,"TabId":2,"Timestamp":"2021-08-17T11:56:49.173Z","client_id":-8972017550787008273,"navigationUrl":"https://view.ceros.com/fireeye/fireeye-ecosystem?heightOverride=835","navigationUrlRejectCode":0,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:56:54.8902554Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":732},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":3,"FrameId":2,"HttpStatusCode":200,"IsTopLevelUrl":0,"NavigationSource":3,"TabId":2,"Timestamp":"2021-08-17T11:56:49.212Z","client_id":-8972017550787008273,"navigationUrl":"https://view.ceros.com/fireeye/fireeye-ecosystem?heightOverride=835","navigationUrlRejectCode":0,"payload_id":47244640257,"pop_sample":100,"referUrl":"https://www.fireeye.com/","referUrlRejectCode":0,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-17T11:56:54.8902869Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":733},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":3,"FrameId":3,"IsTopLevelUrl":0,"TabId":2,"Timestamp":"2021-08-17T11:56:49.849Z","client_id":-8972017550787008273,"navigationUrl":"","navigationUrlRejectCode":19,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:56:54.8903206Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":734},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":3,"FrameId":3,"HttpStatusCode":-1,"IsTopLevelUrl":0,"NavigationSource":3,"TabId":2,"Timestamp":"2021-08-17T11:56:49.849Z","client_id":-8972017550787008273,"navigationUrl":"","navigationUrlRejectCode":19,"payload_id":47244640257,"pop_sample":100,"referUrl":"","referUrlRejectCode":107,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-17T11:56:54.8904367Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":735},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"614bed63-70f2-4ef7-9284-34444d5bffea","EventInfo.Level":3,"FrameId":4,"IsTopLevelUrl":1,"TabId":30,"Timestamp":"2021-08-17T11:56:54.723Z","client_id":-8972017550787008273,"navigationUrl":"https://ntp.msn.com/edge/ntp?locale=en-US&title=New%20tab&fre=1&dsp=1&sp=Bing&prerender=1","navigationUrlRejectCode":0,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_NavigateCompleteExtended","time":"2021-08-17T11:56:54.9250185Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":736},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"HttpStatusCode":4,"NavigationSource":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"referUrlRejectCode":4,"utc_flags":4},"privTags":50331650},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:HttpStatusCode;t:2","n:IsTopLevelUrl;t:1","n:NavigationSource;t:2","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:referUrlRejectCode;t:2","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"614bed63-70f2-4ef7-9284-34444d5bffea","EventInfo.Level":3,"FrameId":4,"HttpStatusCode":200,"IsTopLevelUrl":1,"NavigationSource":0,"TabId":30,"Timestamp":"2021-08-17T11:56:54.923Z","client_id":-8972017550787008273,"navigationUrl":"https://ntp.msn.com/edge/ntp?locale=en-US&title=New%20tab&fre=1&dsp=1&sp=Bing&prerender=1","navigationUrlRejectCode":0,"payload_id":47244640257,"pop_sample":100,"referUrl":"","referUrlRejectCode":107,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 101 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_TabAllClosed
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_TabAllClosed","time":"2021-08-17T11:57:04.1748387Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":737},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"TabId":4,"client_id":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":50331648},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:TabId;t:2","n:client_id;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","EventInfo.Level":2,"TabId":0,"Timestamp":"2021-08-17T11:57:04.174Z","client_id":-8972017550787008273,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_TabClosed
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_TabClosed","time":"2021-08-17T11:57:04.1786175Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":738},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"TabId":4,"client_id":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":50331648},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:TabId;t:2","n:client_id;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EventInfo.Level":2,"TabId":2,"Timestamp":"2021-08-17T11:57:04.176Z","client_id":-8972017550787008273,"payload_id":47244640257,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_W3cNavTiming
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_W3cNavTiming","time":"2021-08-17T11:57:04.1806336Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1000837","seq":739},"metadata":{"f":{"Channel":4,"ComulativeLayoutShift":6,"EffectiveConnectionType":4,"EventInfo.Level":4,"FirstContentfulPaint":6,"FirstInputDelay":6,"LargestContentfulPaint":6,"TabId":4,"client_id":4,"connectEnd":6,"connectStart":6,"domComplete":6,"domContentLoadedEnd":6,"domContentLoadedStart":6,"domInteractive":6,"domainLookupEnd":6,"domainLookupStart":6,"downlink":4,"fetchStart":6,"httpRtt":4,"loadEventEnd":6,"loadEventStart":6,"payload_id":4,"pop_sample":6,"redirectEnd":6,"redirectStart":6,"requestStart":6,"responseEnd":6,"responseStart":6,"transportRtt":4,"unloadEventEnd":6,"unloadEventStart":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:ComulativeLayoutShift;t:3","n:EffectiveConnectionType;t:2","n:EventInfo.Level;t:2","n:FirstContentfulPaint;t:3","n:FirstInputDelay;t:3","n:LargestContentfulPaint;t:3","n:StartedInForeground;t:1","n:TabId;t:2","n:client_id;t:2","n:connectEnd;t:3","n:connectStart;t:3","n:domComplete;t:3","n:domContentLoadedEnd;t:3","n:domContentLoadedStart;t:3","n:domInteractive;t:3","n:domainLookupEnd;t:3","n:domainLookupStart;t:3","n:downlink;t:2","n:fetchStart;t:3","n:httpRtt;t:2","n:loadEventEnd;t:3","n:loadEventStart;t:3","n:payload_id;t:2","n:pop_sample;t:3","n:redirectEnd;t:3","n:redirectStart;t:3","n:requestStart;t:3","n:responseEnd;t:3","n:responseStart;t:3","n:transportRtt;t:2","n:unloadEventEnd;t:3","n:unloadEventStart;t:3","n:utc_flags;t:2"]},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ComulativeLayoutShift":0.070428207516670227,"ConnectionType":"Ethernet","CorrelationGuid":"5c65ea68-4d6c-41cc-ba3d-09cf7c93eae5","EffectiveConnectionType":0,"EventInfo.Level":3,"FirstContentfulPaint":2458,"FirstInputDelay":-1,"LargestContentfulPaint":2458,"StartedInForeground":1,"TabId":2,"Timestamp":"2021-08-17T11:57:04.178Z","client_id":-8972017550787008273,"connectEnd":215,"connectStart":165,"domComplete":2644,"domContentLoadedEnd":2644,"domContentLoadedStart":2644,"domInteractive":-1,"domainLookupEnd":165,"domainLookupStart":118,"downlink":2147483647,"fetchStart":27,"httpRtt":0,"loadEventEnd":4791,"loadEventStart":4780,"payload_id":47244640257,"pop_sample":100,"redirectEnd":-1,"redirectStart":-1,"requestStart":215,"responseEnd":584,"responseStart":579,"transportRtt":0,"unloadEventEnd":-1,"unloadEventStart":-1,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: msedge.exe
friendly_logging_binary_name: msedge.exe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:57:04.9243830Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"442D4D19-BE1D-4DBD-A7F1-388EB002A5BF","flags":469762632,"epoch":"1000837","seq":740},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":1176},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:00007badeb2f1b9564e13e392dc6dfed743c0000ffff!000016a0eb32dffc3f8e36e2c4e76bc410ebcb4e0c5a!msedge.exe","AppVersion":"2021/08/11:22:26:42!337369!msedge.exe","CommandLineHash":2281205206,"AppSessionId":"000009E0-0001-000A-5183-08F45E93D701","AggregationStartTime":"2021-08-17T11:46:41.9813123Z","AggregationDurationMS":622937,"InFocusDurationMS":62,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":62,"UserOrDisplayActiveDurationMS":62,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000008000000000","InputSec":1,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":1,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":825,"WindowHeight":990,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":7,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1176,"CompositionRenderedSec":17,"CompositionDirtyGeneratedSec":18,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":5,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":18609,"EventSequence":85}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: chrome.exe
friendly_logging_binary_name: Google Chrome
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:57:10.3266079Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"7B529B3C-9A32-4AE3-B3F7-F2DB73FC4879","flags":469762632,"epoch":"1000837","seq":741},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","ver":"2021/08/13:18:16:48!260996!chrome.exe","asId":1145},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:00064bf56f025faab27c464b8efdfd90c8a600000904!0000ba7185677b750c8025ffc2b2406960fe63261402!chrome.exe","AppVersion":"2021/08/13:18:16:48!260996!chrome.exe","CommandLineHash":2428372714,"AppSessionId":"00001138-0001-000A-32B5-09F35E93D701","AggregationStartTime":"2021-08-17T11:46:41.9813123Z","AggregationDurationMS":628328,"InFocusDurationMS":24907,"FocusLostCount":2,"NewProcessCount":1,"UserActiveDurationMS":24907,"UserOrDisplayActiveDurationMS":24907,"UserActiveTransitionCount":0,"InFocusBitmap":"0x000000C000000000","InputSec":7,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":7,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":825,"WindowHeight":990,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":7,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1145,"CompositionRenderedSec":25,"CompositionDirtyGeneratedSec":25,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":25016,"EventSequence":86}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: taskmgr.exe
friendly_logging_binary_name: Task Manager
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:57:25.0889039Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"6511B864-0390-4D2D-A135-FFCE7340D585","flags":469762632,"epoch":"1000837","seq":742},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a60eb3acf174c53043ffc1c222b639083906404b!taskmgr.exe","ver":"2063/07/05:07:57:35!131F97!taskmgr.exe","asId":1090},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a60eb3acf174c53043ffc1c222b639083906404b!taskmgr.exe","AppVersion":"2063/07/05:07:57:35!131F97!taskmgr.exe","CommandLineHash":282859184,"AppSessionId":"00001514-0001-000A-26C2-1F915D93D701","AggregationStartTime":"2021-08-17T11:46:41.9813123Z","AggregationDurationMS":643078,"InFocusDurationMS":12390,"FocusLostCount":2,"NewProcessCount":1,"UserActiveDurationMS":12390,"UserOrDisplayActiveDurationMS":12390,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100008001000000","InputSec":10,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":10,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":379,"WindowHeight":372,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":8,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":7,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1090,"CompositionRenderedSec":11,"CompositionDirtyGeneratedSec":14,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":633375,"EventSequence":87}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.StoreLaunching
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.StoreLaunching","time":"2021-08-17T11:57:29.3404307Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":743},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"correlationVectorRoot":"jT1SjxLiQ0+hikLz"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:29.3838837Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":744},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetDefaultSystemUserAsync","latencyMs":25,"targetUri":"auth:GetTokenSilentlyAsync","protocolStatusCode":"","serviceErrorCode":-2147023579,"requestMethod":0,"succeeded":0,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"GetTokenSilentlyAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:29.4463430Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":745},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetDefaultStoreUserAsync","latencyMs":90,"targetUri":"auth:GetTokenSilentlyAsync","protocolStatusCode":"","serviceErrorCode":-2147023579,"requestMethod":0,"succeeded":0,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"GetTokenSilentlyAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:29.4695192Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":746},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:29.4698293Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":747},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:29.8264604Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC0010-0008-0000-B422-A41FB0DBC800","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":748},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.2"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"System.Collections.Generic.Dictionary`2[System.String,System.Object]","latencyMs":358,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/callerspecificdata/?market=US&locale=en-US&appversion=12107.1001.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814751014977536&catalogLocales=en-US&oemId=Public&scmId=Public&moId=Public&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm061%2Cm081%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&pzn=1&preciseAppVersion=12107.1001.15.0&preciseDeviceFamilyVersion=2814751014978701&mfg=innotek+GmbH&model=VirtualBox&architecture=x64&skipLifeline=false","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":3246,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"CallerSpecificData","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.2","retryCount":1,"contentLatencyMilliseconds":358,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:29.8405276Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":749},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.StoreLaunched
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.StoreLaunched","time":"2021-08-17T11:57:29.8679123Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":750},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"correlationVectorRoot":"jT1SjxLiQ0+hikLz","processArguments":"","source":"user"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:29.8694374Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC0010-000A-0000-B422-5026F065D000","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":751},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.3"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"WinStore.DataModel.Manifest","latencyMs":21,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/pages/chrome?appversion=12107.1001.0.0&market=US&locale=en-US&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814751014977536&userSegments=6s7hQGocdWdYfcAV1GTLAHu9pixqjCk34Vct0dl0fzDfPxUmGqrKAA7DsGyc50eF0EMik8UTMQi+pRKKGIWwslsApkLuIK8joQjl+TLCdXcdNWWIsXlDbtB5EIHh7NoV7Xir8b8whGDH3wySUGt21GvJjoRVaOZwMVbWTkYasUS9fG8UJv5JLS7pxL8HhhPmgKHFPFsH7I4dqi9SiTSsjJKyOOMFuZjJfF7GphwTwAtestiJ44j/dnqRYVO1QGFCwzWvQqV9a8vp9j0BID/9QJZ/Yb/iLe+s5gOUU20ZwZX8BOep2fcJKYWFYwVOUaaHicFXZcHNlZjVEXnJLdqABh11CISuZni+WtGgvioRzmLqIa18WVR1eLG5hM/grAVUbvzfZGTz/nKm7oFHjyGOnExPdKtmsslYFlmFa83d8b1e9QnOMCTLENPcubk9Jg3B","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":11066,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"NavChrome","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.3","retryCount":1,"contentLatencyMilliseconds":21,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:29.9707607Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":752},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.0188551Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC0010-000C-0000-B422-0C10F059CD00","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":753},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.4"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"WinStore.DataModel.Manifest","latencyMs":44,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/pages/home?market=US&locale=en-US&deviceFamily=Windows.Desktop&appVersion=12107.1001.0.0&hydrateCount=3&deviceFamilyVersion=2814751014977536&userSegments=6s7hQGocdWdYfcAV1GTLAHu9pixqjCk34Vct0dl0fzDfPxUmGqrKAA7DsGyc50eF0EMik8UTMQi+pRKKGIWwslsApkLuIK8joQjl+TLCdXcdNWWIsXlDbtB5EIHh7NoV7Xir8b8whGDH3wySUGt21GvJjoRVaOZwMVbWTkYasUS9fG8UJv5JLS7pxL8HhhPmgKHFPFsH7I4dqi9SiTSsjJKyOOMFuZjJfF7GphwTwAtestiJ44j/dnqRYVO1QGFCwzWvQqV9a8vp9j0BID/9QJZ/Yb/iLe+s5gOUU20ZwZX8BOep2fcJKYWFYwVOUaaHicFXZcHNlZjVEXnJLdqABh11CISuZni+WtGgvioRzmLqIa18WVR1eLG5hM/grAVUbvzfZGTz/nKm7oFHjyGOnExPdKtmsslYFlmFa83d8b1e9QnOMCTLENPcubk9Jg3B","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":154338,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"HomePage","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.4","retryCount":1,"contentLatencyMilliseconds":44,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.PageView
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.PageView","time":"2021-08-17T11:57:30.0415787Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":754},"metadata":{"f":{"baseData":{"f":{"screenState":2,"behavior":2,"resHeight":2,"resWidth":2,"vpHeight":2,"vpWidth":2}}}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"app":{"expId":"","userId":"","id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"PageView","baseData":{"ver":"1.0","impressionGuid":"9bae1e65-63b3-4551-975b-096bd3943adb","pageName":"homepage","uri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/pages/home?market=US&locale=en-US&deviceFamily=Windows.Desktop&appVersion=12107.1001.0.0&hydrateCount=3&deviceFamilyVersion=2814751014977536&userSegments=6s7hQGocdWdYfcAV1GTLAHu9pixqjCk34Vct0dl0fzDfPxUmGqrKAA7DsGyc50eF0EMik8UTMQi+pRKKGIWwslsApkLuIK8joQjl+TLCdXcdNWWIsXlDbtB5EIHh7NoV7Xir8b8whGDH3wySUGt21GvJjoRVaOZwMVbWTkYasUS9fG8UJv5JLS7pxL8HhhPmgKHFPFsH7I4dqi9SiTSsjJKyOOMFuZjJfF7GphwTwAtestiJ44j/dnqRYVO1QGFCwzWvQqV9a8vp9j0BID/9QJZ/Yb/iLe+s5gOUU20ZwZX8BOep2fcJKYWFYwVOUaaHicFXZcHNlZjVEXnJLdqABh11CISuZni+WtGgvioRzmLqIa18WVR1eLG5hM/grAVUbvzfZGTz/nKm7oFHjyGOnExPdKtmsslYFlmFa83d8b1e9QnOMCTLENPcubk9Jg3B","referrerUri":"","pageType":"verticalStackPageLayout","pageTags":"","product":"","screenState":0,"actionType":"","behavior":0,"resHeight":632,"resWidth":800,"vpHeight":632,"vpWidth":800,"market":"en-US","region":"US","content":""},"cpv":1,"isAadSignedIn":0,"isMsaSignedIn":0,"correlationVectorRoot":"jT1SjxLiQ0+hikLz","muid":"27107A1E2DF960741DA26A882C72619C","flightName":"12416c,4918t1,6051t1,cartemberpl,cartinstallall,daconvertenabled,disablenorefunds,enableavatars,enablefamilysharing,enablescarlettmetadata,enablesfdsapp,installgrtswithgarrison,redirecttogarrison,sfaaab,sfdsconfigoverride,sfdspriceoverride,tasmigration010,test21emulation,wishlistmvpsfaf,SFE.Anon","tasguid":"ebb5e833-68a5-45f7-a076-a5df6959fcbe"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.0498134Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC000C-0006-0000-B422-2C25404EC800","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":756},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.1"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"System.Collections.Generic.Dictionary`2[System.String,System.Object]","latencyMs":563,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/secondarycallerspecificdata/?market=US&locale=en-US&appversion=12107.1001.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814751014977536&catalogLocales=en-US&oemId=Public&scmId=Public&moId=Public&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm061%2Cm081%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&preciseAppVersion=12107.1001.15.0&preciseDeviceFamilyVersion=2814751014978701","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":9338,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"SecondaryCallerSpecificData","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.1","retryCount":1,"contentLatencyMilliseconds":563,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.1311469Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":757},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.1829647Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC0024-001A-0000-B422-0C10E03FD200","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":758},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.5"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"WinStore.DataModel.CollectionDetail","latencyMs":59,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/recommendations/collections/collection/casualpcgames?market=US&locale=en-US&deviceFamily=Windows.Desktop&appVersion=12107.1001.0.0&pageSize=15&cardsEnabled=true","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":86036,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"/v8.0/recommendations/collections/collection/casualpcgames","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.5","retryCount":1,"contentLatencyMilliseconds":59,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.2298238Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":759},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.2317664Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":760},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.2319005Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":761},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.2446823Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":762},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.2677699Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC0064-0044-0000-B422-0021B0398102","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":763},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.7"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"Newtonsoft.Json.Linq.JToken","latencyMs":29,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/recommendations/listofcollections/Home?market=US&locale=en-US&appVersion=12107.1001.0.0&deviceFamily=Windows.Desktop&pageSize=15&cardsEnabled=true","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":6736,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"/v8.0/recommendations/listofcollections/Home","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.7","retryCount":1,"contentLatencyMilliseconds":29,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.2682748Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC0060-0042-0000-B422-2C2530E38002","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":764},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.6"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"Newtonsoft.Json.Linq.JToken","latencyMs":29,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/recommendations/collections/TopFree?market=US&locale=en-US&mediaType=Apps&deviceFamily=Windows.Desktop&appVersion=12107.1001.0.0&pageSize=15&cardsEnabled=true","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":65877,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"/v8.0/recommendations/collections/TopFree","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.6","retryCount":1,"contentLatencyMilliseconds":29,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.5367646Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC006C-0048-0000-B422-502650518202","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":765},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.9"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"Newtonsoft.Json.Linq.JToken","latencyMs":288,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/pages/collection?collectionId=HomeColl1&appVersion=12107.1001.0.0&market=US&locale=en-US&deviceFamily=Windows.Desktop&userSegments=6s7hQGocdWdYfcAV1GTLAHu9pixqjCk34Vct0dl0fzDfPxUmGqrKAA7DsGyc50eF0EMik8UTMQi+pRKKGIWwslsApkLuIK8joQjl+TLCdXcdNWWIsXlDbtB5EIHh7NoV7Xir8b8whGDH3wySUGt21GvJjoRVaOZwMVbWTkYasUS9fG8UJv5JLS7pxL8HhhPmgKHFPFsH7I4dqi9SiTSsjJKyOOMFuZjJfF7GphwTwAtestiJ44j/dnqRYVO1QGFCwzWvQqV9a8vp9j0BID/9QJZ/Yb/iLe+s5gOUU20ZwZX8BOep2fcJKYWFYwVOUaaHicFXZcHNlZjVEXnJLdqABh11CISuZni+WtGgvioRzmLqIa18WVR1eLG5hM/grAVUbvzfZGTz/nKm7oFHjyGOnExPdKtmsslYFlmFa83d8b1e9QnOMCTLENPcubk9Jg3B","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":5008,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"CollectionDetails","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.9","retryCount":1,"contentLatencyMilliseconds":288,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.5464244Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":766},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:30.7296548Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC0068-0046-0000-B422-2C25007C8102","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":767},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.8"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"Newtonsoft.Json.Linq.JToken","latencyMs":501,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/recommendations/collections/Collection/TrendingHomeColl1?market=US&locale=en-US&deviceFamily=Windows.Desktop&appVersion=12107.1001.0.0&pageSize=15&cardsEnabled=true","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":42941,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"/v8.0/recommendations/collections/Collection/TrendingHomeColl1","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.8","retryCount":1,"contentLatencyMilliseconds":501,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.ContentUpdate
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.ContentUpdate","time":"2021-08-17T11:57:31.1083403Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":768},"metadata":{"f":{"baseData":{"f":{"pageHeight":2,"vpHeight":2,"vpWidth":2,"behavior":2,"vScrollOffset":2,"hScrollOffset":2}}}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"app":{"expId":"","userId":"","id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"ContentUpdate","baseData":{"ver":"1.0","impressionGuid":"9bae1e65-63b3-4551-975b-096bd3943adb","pageName":"homepage","uri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/pages/home?market=US&locale=en-US&deviceFamily=Windows.Desktop&appVersion=12107.1001.0.0&hydrateCount=3&deviceFamilyVersion=2814751014977536&userSegments=6s7hQGocdWdYfcAV1GTLAHu9pixqjCk34Vct0dl0fzDfPxUmGqrKAA7DsGyc50eF0EMik8UTMQi+pRKKGIWwslsApkLuIK8joQjl+TLCdXcdNWWIsXlDbtB5EIHh7NoV7Xir8b8whGDH3wySUGt21GvJjoRVaOZwMVbWTkYasUS9fG8UJv5JLS7pxL8HhhPmgKHFPFsH7I4dqi9SiTSsjJKyOOMFuZjJfF7GphwTwAtestiJ44j/dnqRYVO1QGFCwzWvQqV9a8vp9j0BID/9QJZ/Yb/iLe+s5gOUU20ZwZX8BOep2fcJKYWFYwVOUaaHicFXZcHNlZjVEXnJLdqABh11CISuZni+WtGgvioRzmLqIa18WVR1eLG5hM/grAVUbvzfZGTz/nKm7oFHjyGOnExPdKtmsslYFlmFa83d8b1e9QnOMCTLENPcubk9Jg3B","pageTags":"","pageHeight":0,"vpHeight":632,"vpWidth":800,"market":"en-US","region":"US","actionType":"","behavior":0,"vScrollOffset":0,"hScrollOffset":0,"contentVer":"","content":"[{\"contentType\":\"0\",\"slotNumber\":\"0\",\"contentName\":\"Home\",\"contentId\":\"home\",\"areaName\":\"NavigationChrome\"},{\"contentType\":\"0\",\"slotNumber\":\"1\",\"contentName\":\"Gaming\",\"contentId\":\"gaming\",\"areaName\":\"NavigationChrome\"},{\"contentType\":\"0\",\"slotNumber\":\"2\",\"contentName\":\"Entertainment\",\"contentId\":\"entertainment\",\"areaName\":\"NavigationChrome\"},{\"contentType\":\"0\",\"slotNumber\":\"3\",\"contentName\":\"Productivity\",\"contentId\":\"productivity\",\"areaName\":\"NavigationChrome\"},{\"contentType\":\"0\",\"slotNumber\":\"4\",\"contentName\":\"Deals\",\"contentId\":\"deals\",\"areaName\":\"NavigationChrome\"},{\"contentType\":\"0\",\"slotNumber\":\"5\",\"contentName\":\"Search\",\"contentId\":\"search\",\"areaName\":\"NavigationChrome\"},{\"contentType\":\"0\",\"slotNumber\":\"6\",\"contentName\":\"SearchButton Chrome\",\"contentId\":\"SearchButton\",\"areaName\":\"NavigationChrome\"},{\"contentType\":\"0\",\"slotNumber\":\"7\",\"contentName\":\"User Profile Button\",\"contentId\":\"userProfileButton\",\"areaName\":\"UserProfileButton\"},{\"contentType\":\"0\",\"slotNumber\":\"0\",\"contentId\":\"homespotlight\",\"contentSource\":\"https://storeedgefd.dsx.mp.microsoft.com/v8.0/ems/curated/HomeSpotlight?market=US&locale=en-US&appVersion=12107.1001.0.0&deviceFamily=Windows.Desktop&placementId=10837389&pageSize=15&cardsEnabled=true&userSegments=6s7hQGocdWdYfcAV1GTLAHu9pixqjCk34Vct0dl0fzDfPxUmGqrKAA7DsGyc50eF0EMik8UTMQi+pRKKGIWwslsApkLuIK8joQjl+TLCdXcdNWWIsXlDbtB5EIHh7NoV7Xir8b8whGDH3wySUGt21GvJjoRVaOZwMVbWTkYasUS9fG8UJv5JLS7pxL8HhhPmgKHFPFsH7I4dqi9SiTSsjJKyOOMFuZjJfF7GphwTwAtestiJ44j%2fdnqRYVO1QGFCwzWvQqV9a8vp9j0BID%2f9QJZ%2fYb%2fiLe+s5gOUU20ZwZX8BOep2fcJKYWFYwVOUaaHicFXZcHNlZjVEXnJLdqABh11CISuZni+WtGgvioRzmLqIa18WVR1eLG5hM%2fgrAVUbvzfZGTz%2fnKm7oFHjyGOnExPdKtmsslYFlmFa83d8b1e9QnOMCTLENPcubk9Jg3B\",\"areaName\":\"homepage\",\"templateName\":\"mosaicHeroLayout\"},{\"contentType\":\"4\",\"slotNumber\":\"0\",\"contentName\":\"Best selling games\",\"areaName\":\"homespotlight\",\"product\":\"msa:e7fe9156-902c-429e-9a07-ec88ccc60bb3\",\"irisCid\":\"128000000000459254\",\"irisPid\":\"425006993\",\"irisFSPRI\":\"70\"},{\"contentType\":\"4\",\"slotNumber\":\"2\",\"contentName\":\"Microsoft 365\",\"areaName\":\"homespotlight\",\"product\":\"msa:CFQ7TTC0K5BF\",\"irisCid\":\"128000000002902589\",\"irisPid\":\"425313855\",\"irisFSPRI\":\"90\"},{\"contentType\":\"4\",\"slotNumber\":\"3\",\"contentName\":\"Get your first month for $1\",\"areaName\":\"homespotlight\",\"product\":\"msa:CFQ7TTC0KHS0\",\"irisCid\":\"128000000002897709\",\"irisPid\":\"425306250\",\"irisFSPRI\":\"90\"},{\"contentType\":\"4\",\"slotNumber\":\"1\",\"contentName\":\"Best entertainment apps\",\"areaName\":\"homespotlight\",\"product\":\"msa:d987c665-6a2c-4e49-babf-e09bad9a35a8\",\"irisCid\":\"128000000000459254\",\"irisPid\":\"425006993\",\"irisFSPRI\":\"70\"}]"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","muid":"27107A1E2DF960741DA26A882C72619C","flightName":"12416c,4918t1,6051t1,cartemberpl,cartinstallall,daconvertenabled,disablenorefunds,enableavatars,enablefamilysharing,enablescarlettmetadata,enablesfdsapp,installgrtswithgarrison,redirecttogarrison,sfaaab,sfdsconfigoverride,sfdspriceoverride,tasmigration010,test21emulation,wishlistmvpsfaf,SFE.Anon","product":"","msaLessEligible":0,"xboxOnlyProduct":0,"buyBoxUpdate":0,"sfaPerfMetrics":"{\"AppInitialization\":27,\"IdentityInitialization\":29,\"FirstTokenInitialization\":388,\"PageNavigation\":1260}","sfaPerfMarkers":"{\"AppInitializationStart\":63764798249315,\"IdentityInitializationStart\":63764798249342,\"FirstTokenInitializationStart\":63764798249436,\"PageNavigationStart\":63764798249846,\"AppInitializationEnd\":63764798249342,\"IdentityInitializationEnd\":63764798249371,\"FirstTokenInitializationEnd\":63764798249825,\"PageNavigationEnd\":63764798251106}"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:31.3450184Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC0028-005A-0000-B422-2C2530E38002","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":770},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.10"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"Newtonsoft.Json.Linq.JToken","latencyMs":809,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/pages/collection?collectionId=corepcgames&appVersion=12107.1001.0.0&market=US&locale=en-US&deviceFamily=Windows.Desktop&oemId=Public&scmId=Public&moId=Public&userSegments=6s7hQGocdWdYfcAV1GTLAHu9pixqjCk34Vct0dl0fzDfPxUmGqrKAA7DsGyc50eF0EMik8UTMQi+pRKKGIWwslsApkLuIK8joQjl+TLCdXcdNWWIsXlDbtB5EIHh7NoV7Xir8b8whGDH3wySUGt21GvJjoRVaOZwMVbWTkYasUS9fG8UJv5JLS7pxL8HhhPmgKHFPFsH7I4dqi9SiTSsjJKyOOMFuZjJfF7GphwTwAtestiJ44j/dnqRYVO1QGFCwzWvQqV9a8vp9j0BID/9QJZ/Yb/iLe+s5gOUU20ZwZX8BOep2fcJKYWFYwVOUaaHicFXZcHNlZjVEXnJLdqABh11CISuZni+WtGgvioRzmLqIa18WVR1eLG5hM/grAVUbvzfZGTz/nKm7oFHjyGOnExPdKtmsslYFlmFa83d8b1e9QnOMCTLENPcubk9Jg3B","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":79933,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"CollectionDetails","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.10","retryCount":1,"contentLatencyMilliseconds":809,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:31.3641263Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":771},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"GetTicketAsyncSilent","latencyMs":0,"targetUri":"auth:RequestTokenAsync?streamlineChecked=False&provider=Xbox","protocolStatusCode":"","serviceErrorCode":0,"requestMethod":0,"succeeded":1,"responseSizeBytes":0,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WebAuthenticationCoreManager","dependencyOperationName":"RequestTokenAsync","dependencyOperationVersion":"(unknown)","dependencyType":"AuthenticationRequest"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.0","retryCount":0,"contentLatencyMilliseconds":0,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.OutgoingServiceRequest
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.OutgoingServiceRequest","time":"2021-08-17T11:57:31.8187213Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"00CC0018-005C-0000-B422-5020605C7EFD","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":772},"metadata":{"f":{"baseData":{"f":{"latencyMs":2,"serviceErrorCode":2,"requestMethod":2,"responseSizeBytes":5}},"contentLatencyMilliseconds":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.11"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"OutgoingServiceRequest","baseData":{"operationName":"Newtonsoft.Json.Linq.JToken","latencyMs":453,"targetUri":"https://storeedgefd.dsx.mp.microsoft.com/v8.0/pages/collection?collectionId=casualpcgames&appVersion=12107.1001.0.0&market=US&locale=en-US&deviceFamily=Windows.Desktop&oemId=Public&scmId=Public&moId=Public&userSegments=6s7hQGocdWdYfcAV1GTLAHu9pixqjCk34Vct0dl0fzDfPxUmGqrKAA7DsGyc50eF0EMik8UTMQi+pRKKGIWwslsApkLuIK8joQjl+TLCdXcdNWWIsXlDbtB5EIHh7NoV7Xir8b8whGDH3wySUGt21GvJjoRVaOZwMVbWTkYasUS9fG8UJv5JLS7pxL8HhhPmgKHFPFsH7I4dqi9SiTSsjJKyOOMFuZjJfF7GphwTwAtestiJ44j/dnqRYVO1QGFCwzWvQqV9a8vp9j0BID/9QJZ/Yb/iLe+s5gOUU20ZwZX8BOep2fcJKYWFYwVOUaaHicFXZcHNlZjVEXnJLdqABh11CISuZni+WtGgvioRzmLqIa18WVR1eLG5hM/grAVUbvzfZGTz/nKm7oFHjyGOnExPdKtmsslYFlmFa83d8b1e9QnOMCTLENPcubk9Jg3B","protocolStatusCode":"200","serviceErrorCode":0,"requestMethod":1,"succeeded":1,"responseSizeBytes":90731,"responseContentType":"JSON","protocol":"HTTP","dependencyName":"WindowsStoreFrontDoor","dependencyOperationName":"CollectionDetails","dependencyOperationVersion":"12107.1001.15.0","dependencyType":"WebService"},"correlationVectorRoot":"jT1SjxLiQ0+hikLz","correlationVector":"jT1SjxLiQ0+hikLz.11","retryCount":1,"contentLatencyMilliseconds":453,"isCached":0,"flightIds":"","optionalData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.StoreSuspending
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.StoreSuspending","time":"2021-08-17T11:57:33.5907034Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":773},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"correlationVectorRoot":"jT1SjxLiQ0+hikLz"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft-Windows-Store.StoreSuspended
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Microsoft-Windows-Store.StoreSuspended","time":"2021-08-17T11:57:33.5907956Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":774},"metadata":{"f":{"memoryUsageInMB":2}},"mscv":{"cV":"jT1SjxLiQ0+hikLz.0"},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"correlationVectorRoot":"jT1SjxLiQ0+hikLz","memoryUsageInMB":78}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:57:33.6889985Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"6689AA13-66D2-4931-8062-11DB733853C3","flags":469762632,"epoch":"1000837","seq":775},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","ver":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","asId":1207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"U:Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe!App","AppVersion":"12107.1001.15.0_x64_!2021/08/02:21:36:25!0!winstore.app.exe","CommandLineHash":2072220261,"AppSessionId":"000022B4-0001-000A-585A-B50D5F93D701","AggregationStartTime":"2021-08-17T11:46:41.9813123Z","AggregationDurationMS":651703,"InFocusDurationMS":4172,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":4172,"UserOrDisplayActiveDurationMS":4172,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000000001000000","InputSec":3,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":3,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":816,"WindowHeight":641,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":7,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1207,"CompositionRenderedSec":4,"CompositionDirtyGeneratedSec":4,"CompositionDirtyPropagatedSec":4,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":32,"SinceFirstInteractivityMS":4375,"EventSequence":88}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-17T11:58:08.0529746Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":503317064,"epoch":"1000837","seq":776},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":63},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-17T11:28:08.0375153Z","HeartBeatSequenceNumber":29,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":114,"DecodingDroppedCount":0,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":5,"SettingsHttpFailures":0,"VortexHttpAttempts":20,"EventsUploaded":173,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":62353,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"MaxInUseScenarioCounter":2,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":220,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-16T21:56:27.567"}}


full_event_name: TelClientSynthetic.HeartBeat_Aria_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_Aria_5","time":"2021-08-17T11:58:08.0579933Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1000837","seq":777},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":63},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-17T11:28:08.0427855Z","HeartBeatSequenceNumber":1,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":335,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":122397,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":350,"PrivacyBlockedCount":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe
friendly_logging_binary_name: Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe?diagnosticdataviewer.exe?
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-17T11:58:39.4079378Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","stId":"CCE74CEC-68FE-4F46-92EC-FA1A4B5E6B02","flags":469762632,"epoch":"1000837","seq":778},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":10,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe!App","ver":"4.2007.11582.0_x64_!2021/06/07:23:14:10!0!diagnosticdataviewer.exe","asId":1213},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"U:Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe!App","AppVersion":"4.2007.11582.0_x64_!2021/06/07:23:14:10!0!diagnosticdataviewer.exe","CommandLineHash":1917871534,"AppSessionId":"000024CC-0001-000A-1EB4-3E145F93D701","AggregationStartTime":"2021-08-17T11:46:41.9813123Z","AggregationDurationMS":717422,"InFocusDurationMS":58734,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":58734,"UserOrDisplayActiveDurationMS":58734,"UserActiveTransitionCount":0,"InFocusBitmap":"0x000000000F000000","InputSec":18,"KeyboardInputSec":12,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":6,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1216,"WindowHeight":941,"MonitorWidth":1680,"MonitorHeight":1050,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":7,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":1213,"CompositionRenderedSec":21,"CompositionDirtyGeneratedSec":21,"CompositionDirtyPropagatedSec":20,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":32,"SinceFirstInteractivityMS":59094,"EventSequence":89}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-18T00:44:12.4127540Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-2503-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1107239","seq":27},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":11,"aiSeqId":5,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":33006,"GPUDeviceID":48879,"SubVendorID":5549,"SubSystemID":1029,"GPURevisionID":0,"DriverVersion":"10.0.19041.868","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16457734,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":true,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":10,"IsRemovable":false,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":19806,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":1,"NumVidPnTargets":1,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_65ab9a260dbf7467\\BasicDisplay.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794020353,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":0}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-18T00:44:12.4127600Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0001-2503-2822CA93D701","eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1107239","seq":28},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":66},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":2,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#4&17f0ff54&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":0,"DisplayAdapterLuid":19806,"AdapterInterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.FeatureExperiment.AggregatedStagingState
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.AggregatedStagingState","time":"2021-08-18T00:47:08.7501367Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1008730696,"epoch":"1107239","seq":29},"metadata":{"privTags":2147483648},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000ba99ba1dbfa64ce188af7cb681751c7185df77ca!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":103},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Features":[{"featureId":18299130,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C6E5C2"},{"featureId":18973123,"hasTrigger":true,"state":2,"variant":1,"payload":177209344,"stateKind":4,"flightId":"FX:11C0E96C"},{"featureId":19638787,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:117B9872"},{"featureId":21969097,"hasTrigger":true,"state":2,"variant":1,"payload":33377331,"stateKind":4,"flightId":"FX:119E26AD"},{"featureId":23057458,"hasTrigger":false,"state":2,"variant":1,"payload":100663311,"stateKind":4,"flightId":"FX:11D5BFCD"},{"featureId":23531064,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11DF5B12"},{"featureId":24706693,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F41B68"},{"featureId":25330851,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DE505A"},{"featureId":27485177,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F1992A"},{"featureId":27919905,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C7EB6A"},{"featureId":28034939,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E50151"},{"featureId":28083526,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DB147C"},{"featureId":28170999,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C9408A"},{"featureId":28240882,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E11E97"},{"featureId":28260762,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C3F9D5"},{"featureId":28361144,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11D898D7"},{"featureId":28585361,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11FB0F2F"},{"featureId":28622680,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11CB9A9F"},{"featureId":28622690,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11C940DB"},{"featureId":28758888,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11CB9AC1"},{"featureId":29815990,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F4161E"},{"featureId":29932051,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E9EE98"},{"featureId":29984114,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E3E2BA"},{"featureId":32249103,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1201B330"},{"featureId":32315643,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1202B7FC"},{"featureId":32328375,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:120BB68E"},{"featureId":33588494,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:121A20E1"}]}}


sid: S-1-5-19
full_event_name: Microsoft.Windows.Security.WSC.EnableDefender
logging_binary_name: svchost_?wscapi.dll?
friendly_logging_binary_name: Windows Security Center API
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.WSC.EnableDefender","time":"2021-08-18T00:47:11.3050957Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1008730696,"epoch":"1107239","seq":30},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":101},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B723AA8B-7E0C-3EE6-7301-C51B07FA0714"},"loc":{"tz":"+10:00"}},"data":{"enable":true,"state":2,"reason":5,"defenderStatus":0}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Upfc.UpfcLaunchResult
logging_binary_name: upfc.exe
friendly_logging_binary_name: Updateability From SCM
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Upfc.UpfcLaunchResult","time":"2021-08-18T00:49:08.2376164Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1009779272,"epoch":"1107239","seq":31},"metadata":{"f":{"hResult":2},"privTags":16777216},"mscv":{"cV":"ZwCmoN6C6US/vksG4v7SLg.0.1"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00002497169c13b0ba46a6be8a1fe493b250094079b7!upfc.exe","ver":"1973/05/29:11:25:14!232CA!upfc.exe","asId":35},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"name":"SIH","hResult":0}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Upfc.UpfcCompleted
logging_binary_name: upfc.exe
friendly_logging_binary_name: Updateability From SCM
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Upfc.UpfcCompleted","time":"2021-08-18T00:49:08.2379163Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1009779272,"epoch":"1107239","seq":32},"metadata":{"f":{"waasMedicPreviousBlackoutStartTime":9,"waasMedicNewBlackoutStartTime":9,"waasMedicPreviousBlackoutEndTime":9,"waasMedicNewBlackoutEndTime":9,"waasMedicPreviousCadenceBlockStartTime":9,"waasMedicNewCadenceBlockStartTime":9,"waasMedicPreviousCadenceBlockEndTime":9,"waasMedicNewCadenceBlockEndTime":9,"hrWaasMedicLaunch":2,"hrSihLaunch":2,"hResult":2},"privTags":16777216},"mscv":{"cV":"ZwCmoN6C6US/vksG4v7SLg.0.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00002497169c13b0ba46a6be8a1fe493b250094079b7!upfc.exe","ver":"1973/05/29:11:25:14!232CA!upfc.exe","asId":35},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"launchtype":"Boot","isWaasMedicBlocked":true,"waasMedicBlockReason":"CadenceBlockTimeDidNotExpire","waasMedicBlackoutTimeExists":true,"waasMedicBlackoutTimeExpired":true,"waasMedicPreviousBlackoutStartTime":"2021-08-04T02:26:43.0000000Z","waasMedicNewBlackoutStartTime":"2021-08-04T02:26:43.0000000Z","waasMedicPreviousBlackoutEndTime":"2021-08-11T02:26:43.0000000Z","waasMedicNewBlackoutEndTime":"2021-08-11T02:26:43.0000000Z","waasMedicCadenceBlockTimeExists":true,"waasMedicCadenceBlockTimeExpired":false,"waasMedicPreviousCadenceBlockStartTime":"2021-08-16T21:53:27.0000000Z","waasMedicNewCadenceBlockStartTime":"2021-08-16T21:53:27.0000000Z","waasMedicPreviousCadenceBlockEndTime":"2021-08-23T21:53:27.0000000Z","waasMedicNewCadenceBlockEndTime":"2021-08-23T21:53:27.0000000Z","hrWaasMedicLaunch":0,"isSihBlocked":false,"sihBlockReason":"Unknown","hrSihLaunch":0,"hResult":0}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.TaskRun
logging_binary_name: sihclient.exe
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.TaskRun","time":"2021-08-18T00:49:08.3981448Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":33},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8}},"mscv":{"cV":"ZwCmoN6C6US/vksG4v7SLg.0.1.1"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00003b38dcc868d30a4489192c927fbec5327196bdd6!sihclient.exe","ver":"2000/07/06:02:35:17!5E1D9!sihclient.exe","asId":109},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","CallerApplicationName":"SIH","CmdLineArgs":"/cv ZwCmoN6C6US/vksG4v7SLg.0.1 ","EventInstanceID":"D1E0CCC9-33E0-4C5A-9B01-604274DFB3B7","ServiceGuid":"E7A50285-D08D-499D-9FF8-180FDC2332BC","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: sihclient.exe
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:49:12.6133652Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":34},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8}},"mscv":{"cV":"ZwCmoN6C6US/vksG4v7SLg.0.1.2"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00003b38dcc868d30a4489192c927fbec5327196bdd6!sihclient.exe","ver":"2000/07/06:02:35:17!5E1D9!sihclient.exe","asId":109},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","CallerApplicationName":"SIHScheduled","TargetMetadataVersion":"","EventInstanceID":"D1E0CCC9-33E0-4C5A-9B01-604274DFB3B7","ServiceGuid":"E7A50285-D08D-499D-9FF8-180FDC2332BC","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: sihclient.exe
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:49:12.6137411Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":35},"metadata":{"f":{"StatusCode":2,"EventInstanceID":8,"ServiceGuid":8}},"mscv":{"cV":"ZwCmoN6C6US/vksG4v7SLg.0.1.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00003b38dcc868d30a4489192c927fbec5327196bdd6!sihclient.exe","ver":"2000/07/06:02:35:17!5E1D9!sihclient.exe","asId":109},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","StatusCode":2379777,"CallerApplicationName":"SIHScheduled","TargetMetadataVersion":"","ApplicableUpdateInfo":"","CachedEngineVersion":"","EventInstanceID":"D1E0CCC9-33E0-4C5A-9B01-604274DFB3B7","ServiceGuid":"E7A50285-D08D-499D-9FF8-180FDC2332BC","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.TaskRun
logging_binary_name: sihclient.exe
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.TaskRun","time":"2021-08-18T00:49:12.6137496Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":36},"metadata":{"f":{"StatusCode":2,"EventInstanceID":8,"ServiceGuid":8}},"mscv":{"cV":"ZwCmoN6C6US/vksG4v7SLg.0.1.4"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00003b38dcc868d30a4489192c927fbec5327196bdd6!sihclient.exe","ver":"2000/07/06:02:35:17!5E1D9!sihclient.exe","asId":109},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Completed","StatusCode":2379777,"CallerApplicationName":"SIH","CmdLineArgs":"/cv ZwCmoN6C6US/vksG4v7SLg.0.1 ","EventInstanceID":"D1E0CCC9-33E0-4C5A-9B01-604274DFB3B7","ServiceGuid":"E7A50285-D08D-499D-9FF8-180FDC2332BC","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292"}}


sid: S-1-5-18
full_event_name: Census.App
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.App","time":"2021-08-18T00:51:08.3071534Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":37},"metadata":{"f":{"CensusVersion":5,"AppraiserRunStartTimeStamp":5,"AppraiserRunEndTimeStamp":5,"AppraiserTaskExitCode":2,"AppraiserTaskLastRun":9},"privTags":2147483648},"mscv":{"cV":"LbjEnbyed0yKfm87.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"CensusVersion":100196451029,"AppraiserEnterpriseErrorCode":0,"AppraiserErrorCode":0,"AppraiserRunIsInProgressOrCrashed":4294967295,"AppraiserRunStartTimeStamp":132736245910693400,"AppraiserRunEndTimeStamp":132736246164756167,"AppraiserTaskEnabled":1,"AppraiserTaskExitCode":267009,"AppraiserTaskLastRun":"2021-08-18T10:51:08.0000000Z"}}


sid: S-1-5-18
full_event_name: Census.Flighting
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.Flighting","time":"2021-08-18T00:51:08.4515914Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":38},"metadata":{"f":{"DeviceSampleRate":6},"privTags":2048},"mscv":{"cV":"LbjEnbyed0yKfm87.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"FlightIds":"FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C3F9D5,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11D5BFCD,FX:11D898D7,FX:11DB147C,FX:11DE505A,FX:11DF5B12,FX:11E11E97,FX:11E3E2BA,FX:11E50151,FX:11E9EE98,FX:11F1992A,FX:11F4161E,FX:11F41B68,FX:11FB0F2F,FX:1201B330,FX:1202B7FC,FX:120BB68E,FX:121A20E1","MSA_Accounts":"","IsFlightsDisabled":0,"FlightingBranchName":"#","DeviceSampleRate":81.750270999999998,"SSRK":"#","DriverTargetRing":"#","EnablePreviewBuilds":4294967295}}


sid: S-1-5-18
full_event_name: Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.UsageStats
logging_binary_name: microsoftedgeupdate.exe
friendly_logging_binary_name: Microsoft Edge Update
payload:
  {"ver":"4.0","name":"Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.UsageStats","time":"2021-08-18T00:51:08.9632203Z","iKey":"P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425","ext":{"utc":{"eventFlags":258,"pgName":"ARIA","flags":1009779272,"epoch":"1107239","seq":39},"metadata":{"f":{"EventInfo.Level":4,"measurementSecs":4},"privTags":2197817344},"app":{"name":"MicrosoftEdgeUpdate","id":"W:0006f9368d1ce8356b0711cefb486cce9e3d00000904!00009f76ef75fb7b0e7cbf90b96be9490600f4b34ad6!microsoftedgeupdate.exe","ver":"2021/02/19:05:54:24!43886!microsoftedgeupdate.exe","asId":136},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:EventInfo.Level;t:2","n:measurementSecs;t:2"]},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventInfo.Level":3,"measurementSecs":96880,"statsString":"goopdate_main:c=34&goopdate_constructor:c=34&cdp_installer_pick_patch:c=1&do_download_success:c=1&do_download_start:c=1&worker_app_updates_available:c=1&worker_update_check_succeeded:c=2&worker_update_check_total:c=2&worker_install_execute_total:c=1&worker_package_cache_put_succeeded:c=1&worker_package_cache_put_total:c=1&worker_download_succeeded:c=1&worker_download_total:c=1&core_worker_succeeded:c=1&core_worker_total:c=1&client_another_update_in_progress:c=1&client_update_apps_duration_ms:t=14;5757;0;45549&updatecheck_succeeded_ms:t=2;4580;4543;4618&omaha_version:i=281487871246373&windows_major_version:i=10&last_started_au:i=1629198996&worker_shell_version:i=281487870853183&last_checked:i=1629188231&is_system_install:b=t&worker_is_uac_disabled:b=f&worker_is_windows_installing:b=f&core_system_enlightened:b=t"}}


sid: S-1-5-18
full_event_name: Census.Speech
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.Speech","time":"2021-08-18T00:51:09.2031462Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":40},"metadata":{"f":{"RemotelyManaged":2,"GPAllowInputPersonalization":2,"MDMAllowInputPersonalization":2,"KeyVer":2,"SpeechServicesValueSource":2},"privTags":2048},"mscv":{"cV":"LbjEnbyed0yKfm87.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"KWSEnabled":"DSMAUser:[]LastLoggedOnUser:[]DeviceUsers:[]","SpeakerIdEnabled":"DSMAUser:[]LastLoggedOnUser:[]DeviceUsers:[]","AboveLockEnabled":"DSMAUser:[]LastLoggedOnUser:[]DeviceUsers:[]","HolographicSpeechInputDisabled":"DSMAUser:[]LastLoggedOnUser:[]DeviceUsers:[]","HolographicSpeechInputDisabledRemote":"DSMAUser:[]LastLoggedOnUser:[]DeviceUsers:[]","SpeechServicesEnabled":"DSMAUser:[]LastLoggedOnUser:[]DeviceUsers:[]","RemotelyManaged":100,"GPAllowInputPersonalization":1,"MDMAllowInputPersonalization":100,"KeyVer":2,"SpeechServicesValueSource":-1}}


sid: S-1-5-18
full_event_name: Census.WU
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.WU","time":"2021-08-18T00:51:09.6290896Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":41},"metadata":{"f":{"WUDeferUpgradePeriod":2,"WUDeferUpdatePeriod":2},"privTags":2147485696},"mscv":{"cV":"LbjEnbyed0yKfm87.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"WUMachineId":"7f714633-1982-493b-a17a-0fe37eb19292","WUServer":"#","WUDODownloadMode":1,"OSWUAutoUpdateOptions":4,"OSWUAutoUpdateOptionsSource":"Default","AppStoreAutoUpdate":4294967295,"AppStoreAutoUpdatePolicy":4294967295,"AppStoreAutoUpdateMDM":2,"DelayUpgrade":"False","UpdateServiceURLConfigured":"0","WUDeferUpgradePeriod":-1,"WUDeferUpdatePeriod":-1,"WUPauseState":"#","OSUninstalled":false,"OSRolledBack":false,"OSRollbackCount":4294967295,"UninstallActive":4294967295,"AppraiserGatedStatus":"2","OSAssessmentForFeatureUpdate":0,"OSAssessmentForQualityUpdate":0,"OSAssessmentForSecurityUpdate":0,"OSAssessmentFeatureOutOfDate":0,"OSAssessmentQualityOutOfDate":0,"OSAssessmentReleaseInfoTime":"2021-08-12T18:02:10.368"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd","time":"2021-08-18T00:51:09.6329076Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":42},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"vH0kXkZcpEyrIGCY.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Identifier":"Client.OS.rs2.amd64","Version":"10.0.19041.1165","Source":"","PreviousVersion":"","LastActivatedVersion":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUUPInfo","objectInstanceId":"Client.OS.rs2.amd64","syncId":"{55f6d153-9edb-4664-b692-00e5d25934f5}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd","time":"2021-08-18T00:51:09.6331533Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":43},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"vH0kXkZcpEyrIGCY.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Identifier":"Windows.AutopilotOOBE.amd64","Version":"10.0.19041.1165","Source":"","PreviousVersion":"","LastActivatedVersion":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUUPInfo","objectInstanceId":"Windows.AutopilotOOBE.amd64","syncId":"{55f6d153-9edb-4664-b692-00e5d25934f5}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd","time":"2021-08-18T00:51:09.6332177Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":44},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"vH0kXkZcpEyrIGCY.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Identifier":"Windows.EmergencyUpdate.amd64","Version":"10.0.19041.1165","Source":"","PreviousVersion":"","LastActivatedVersion":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUUPInfo","objectInstanceId":"Windows.EmergencyUpdate.amd64","syncId":"{55f6d153-9edb-4664-b692-00e5d25934f5}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd","time":"2021-08-18T00:51:09.6333340Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":45},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"vH0kXkZcpEyrIGCY.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Identifier":"Windows.OOBE.amd64","Version":"10.0.19041.1165","Source":"","PreviousVersion":"","LastActivatedVersion":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUUPInfo","objectInstanceId":"Windows.OOBE.amd64","syncId":"{55f6d153-9edb-4664-b692-00e5d25934f5}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd","time":"2021-08-18T00:51:09.6334012Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":46},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"vH0kXkZcpEyrIGCY.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Identifier":"Windows.UpdateStackPackage.amd64","Version":"10.0.19041.1165","Source":"","PreviousVersion":"","LastActivatedVersion":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUUPInfo","objectInstanceId":"Windows.UpdateStackPackage.amd64","syncId":"{55f6d153-9edb-4664-b692-00e5d25934f5}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd","time":"2021-08-18T00:51:09.6335059Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":47},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"vH0kXkZcpEyrIGCY.0","cV":"Vp7wCFzy2kGgG37s.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000072b068446c47c606a257e6bfc43edd3be211f2da!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":119},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Identifier":"DefenderSignature.amd64","Version":"1.345.673.0","Source":"","PreviousVersion":"","LastActivatedVersion":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUUPInfo","objectInstanceId":"DefenderSignature.amd64","syncId":"{55f6d153-9edb-4664-b692-00e5d25934f5}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:51:13.2797543Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":48},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"IsWUfBFederatedScanDisabled":2,"ActivityMatchingId":8}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.0.1.0.0.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"00000000-0000-0000-0000-000000000000","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"IsWUfBFederatedScanDisabled":-1,"ClientVersion":"10.0.19041.1151","ActivityMatchingId":"065F0807-6B85-44F3-9B01-FCE019B78A47"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:51:13.2949336Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":49},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"IsWUfBFederatedScanDisabled":2,"ActivityMatchingId":8}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.0.1.1.0.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"00000000-0000-0000-0000-000000000000","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"8B24B027-1DEE-BABB-9A95-3517DFB9C552","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"IsWUfBFederatedScanDisabled":-1,"ClientVersion":"10.0.19041.1151","ActivityMatchingId":"C69D7D35-A199-4893-A1C3-7FE20D2B28D4"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.UpdateDetected
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.UpdateDetected","time":"2021-08-18T00:51:29.7284356Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":50},"metadata":{"f":{"NumberOfApplicableUpdates":2,"ServiceGuid":8}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.0.1.0.0.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","NumberOfApplicableUpdates":25,"ApplicableUpdateInfo":"Id:94E2C607-E494-4DCD-8856-011394ADFEE5|Rev:200|EventType:1|State:3|Context:0|Deployment:49572462|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:21693E08-6E71-4B73-B136-8FA56D51F344|Rev:200|EventType:1|State:3|Context:0|Deployment:49572465|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:85A6C409-7A78-4393-A656-7E8FB6826FC1|Rev:200|EventType:1|State:3|Context:0|Deployment:49572450|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:57ABB30B-FB19-4579-95CC-4B43461AB7D1|Rev:200|EventType:1|State:3|Context:0|Deployment:49572385|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:0105C10B-B38D-4949-B530-632EC64EF458|Rev:200|EventType:1|State:3|Context:0|Deployment:49572372|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:EF67840F-80FD-42A8-8126-6685F2804ED0|Rev:200|EventType:1|State:3|Context:0|Deployment:49572379|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:6087A019-0FB8-48F9-9029-C7B694FA5F09|Rev:200|EventType:1|State:3|Context:0|Deployment:49327400|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:5F0FB519-AC98-4EFD-8C42-072778C9B26D|Rev:200|EventType:1|State:3|Context:0|Deployment:49327395|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:2507051C-08EA-496B-AAEA-C2DCD95CA8B0|Rev:200|EventType:1|State:3|Context:0|Deployment:49572362|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:E9B5A025-DEF9-48F3-9DA2-B172C0760174|Rev:200|EventType:1|State:3|Context:0|Deployment:49572384|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:7F6EDB25-0E75-44A1-9D61-EC3E07354FBF|Rev:200|EventType:1|State:3|Context:0|Deployment:49572377|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:B2F49E2B-5631-4FD8-B2AF-1B2F9F340192|Rev:200|EventType:1|State:3|Context:0|Deployment:49327382|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:E7C2B840-1AD1-4A7E-99D1-84E0F21F1858|Rev:200|EventType:1|State:3|Context:0|Deployment:49572432|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:635A5847-143E-47CA-8E1C-D65C758543AF|Rev:200|EventType:1|State:3|Context:0|Deployment:49327435|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:382E694E-AC64-4C47-89C0-AAE3BED71399|Rev:200|EventType:1|State:3|Context:0|Deployment:49572391|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:E2E08B52-7625-4C9A-B04F-54C56F8649F2|Rev:200|EventType:1|State:3|Context:0|Deployment:49327402|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:8B7FED54-AEF8-412F-B7AC-424AD845769A|Rev:200|EventType:1|State:3|Context:0|Deployment:49572420|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:333E8057-3508-4241-B2D7-7785900F862D|Rev:200|EventType:1|State:3|Context:0|Deployment:49327397|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:2648C65B-A12C-47B1-BABF-C6EFE9A1BF32|Rev:200|EventType:1|State:3|Context:0|Deployment:49572447|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:FB46A45E-C7BB-4E3E-8B50-5EB102AD4228|Rev:200|EventType:1|State:3|Context:0|Deployment:49572396|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:544E3E6A-0E88-41FC-ADDB-345A5BB31AB8|Rev:200|EventType:1|State:3|Context:0|Deployment:49572397|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:42B2A670-CC26-4A20-BD6D-015268445719|Rev:200|EventType:1|State:3|Context:0|Deployment:49327387|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:3A430672-D1C6-4397-8770-DA9F599E7546|Rev:200|EventType:1|State:3|Context:0|Deployment:49572472|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:01FB4072-A6D0-484F-A1BE-C5C73B339831|Rev:200|EventType:1|State:3|Context:0|Deployment:49572442|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:3A7EE773-E36A-4576-B7A9-81420D71ADD7|Rev:200|EventType:1|State:3|Context:0|Deployment:49572417|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203","IntentPFNs":"","RelatedCV":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.UpdateDetected
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.UpdateDetected","time":"2021-08-18T00:51:29.7284748Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":51},"metadata":{"f":{"NumberOfApplicableUpdates":2,"ServiceGuid":8}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.0.1.0.0.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","NumberOfApplicableUpdates":14,"ApplicableUpdateInfo":"Id:36CC7382-5A7A-49B4-9E60-AB7595C7B078|Rev:200|EventType:1|State:3|Context:0|Deployment:49327392|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:80072189-7CEB-4BA5-9170-0385863FFC81|Rev:200|EventType:1|State:3|Context:0|Deployment:49572435|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:3EEBE2A9-8FAA-460F-9B7E-ED611C4AC81A|Rev:200|EventType:1|State:3|Context:0|Deployment:49572412|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:AE2F6AB2-C36A-446B-8FBE-BF55CD367F60|Rev:200|EventType:1|State:3|Context:0|Deployment:49327437|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:A83C4ABC-9D3C-46CA-9A50-82B5A0375395|Rev:200|EventType:1|State:2|Context:0|Deployment:49678713|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:A8E688C1-81F4-4960-B8FA-5CC02FF2FCEB|Rev:200|EventType:1|State:3|Context:0|Deployment:49572365|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:598D6AD8-F3A8-4B2F-846B-4F5A86554203|Rev:200|EventType:2|State:2|Context:0|Deployment:49678596;Id:C6405ADB-1D6A-4119-AB09-7E1F3FDBF49F|Rev:200|EventType:1|State:3|Context:0|Deployment:49327380|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:2CCEB9DE-A522-457A-ABB1-BC3E5B0BA648|Rev:200|EventType:1|State:3|Context:0|Deployment:49572402|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:21D372E9-8147-47DE-9CCB-227F53B86B66|Rev:200|EventType:1|State:3|Context:0|Deployment:49572405|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:3F1C0FEC-3352-4575-BBDB-34E1F1BF0CDE|Rev:200|EventType:1|State:3|Context:0|Deployment:49572457|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:C1C178F3-AD00-4AE2-AD49-D8D5BB6B0D57|Rev:200|EventType:1|State:3|Context:0|Deployment:49327390|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:01CCFDF8-11D9-42B1-AA0A-B72D5E06096F|Rev:200|EventType:1|State:3|Context:0|Deployment:49572427|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203;Id:F04760FD-E3E5-4CE6-BF37-C24F54510852|Rev:200|EventType:1|State:3|Context:0|Deployment:49327385|BundleIds:598D6AD8-F3A8-4B2F-846B-4F5A86554203","IntentPFNs":"","RelatedCV":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:51:29.7288397Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":52},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.0.1.0.0.4.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"E87D57D1-21C6-48E8-810B-1C91E21D94B2","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"065F0807-6B85-44F3-9B01-FCE019B78A47","SyncType":2,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":0,"ScanDurationInSeconds":16,"ScanEnqueueTime":0,"NumberOfLoop":5,"NumberOfUpdatesEvaluated":1292,"NumberOfNewUpdatesFromServiceSync":444,"ServiceUrl":"https://fe2cr.update.microsoft.com/v6/ClientWebService/client.asmx","Online":true,"AllowCachedResults":false,"MetadataIntegrityMode":3,"TotalNumMetadataSignatures":468,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":0,"ScanProps":0,"NumberOfApplicableUpdates":1,"ApplicableUpdateInfo":"Id:598D6AD8-F3A8-4B2F-846B-4F5A86554203|Rev:200|EventType:2|State:2|Context:0|Deployment:49678596","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:51:34.8687758Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":53},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.0.1.1.0.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"B3CE7860-52E5-4BAF-85D9-883837013011","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"8B24B027-1DEE-BABB-9A95-3517DFB9C552","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"C69D7D35-A199-4893-A1C3-7FE20D2B28D4","SyncType":2,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":0,"ScanDurationInSeconds":21,"ScanEnqueueTime":16,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":74,"NumberOfNewUpdatesFromServiceSync":0,"ServiceUrl":"https://fe3cr.delivery.mp.microsoft.com/ClientWebService/client.asmx","Online":true,"AllowCachedResults":false,"MetadataIntegrityMode":3,"TotalNumMetadataSignatures":0,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":1,"ScanProps":0,"NumberOfApplicableUpdates":0,"ApplicableUpdateInfo":"","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-18T00:51:42.7621952Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":54},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.1.1.5.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"92A9096B-063F-48F4-A921-40B0429A4BE4","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":3,"UpdateId":"A83C4ABC-9D3C-46CA-9A50-82B5A0375395","RevisionNumber":200,"BundleId":"598D6AD8-F3A8-4B2F-846B-4F5A86554203","BundleRevisionNumber":200,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0}}


sid: S-1-5-20
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?dosvc.dll?
friendly_logging_binary_name: Delivery Optimization
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-18T00:51:43.0878694Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":55},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.1.1.3.1.1"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":87},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:2CD5BDB8-5AAC-E974-9C40-74864CF5B277"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"47b04ddf99733341a165c14e42ed1e3000000000","doClientVersion":"10.0.19041.746","jobID":"6EC3E24A-A794-40B3-94EF-81C1FD5AA912","sessionID":"594CC383-55A0-4FC0-BEC7-CA3E95DE1F1B","predefinedCallerName":"WU Client Download","updateID":"{A83C4ABC-9D3C-46CA-9A50-82B5A0375395}","costFlags":2147483681,"fileID":"1ea6721710b7a933834949001f3291bdb1696a80","fileSize":659904,"fileSizeCaller":659904,"bytesRequested":659904,"cdnUrl":"http://3.au.download.windowsupdate.com/d/msdownload/update/software/defu/2021/08/am_delta_patch_1.345.673.0_1ea6721710b7a933834949001f3291bdb1696a80.exe","routeToCacheServer":"","filePath":"C:\\Windows\\SoftwareDistribution\\Download\\a7acebc859e78c3b6003eb90962a826f\\1ea6721710b7a933834949001f3291bdb1696a80","groupID":"","background":true,"downloadMode":99,"downloadModeSrc":99,"downloadModeReason":-2133835749,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"{\"TraceLevel\":{\"v\":\"4\",\"p\":\"99\"},\"CountryCode\":{\"v\":\"AU\",\"p\":\"1\"},\"KeyValue_EndpointFullUri\":{\"v\":\"kv801.prod.do.dsp.mp.microsoft.com\",\"p\":\"1\"},\"ClusterCount\":{\"v\":\"5\",\"p\":\"0\"}}","isThrottled":0}}


sid: S-1-5-18
full_event_name: Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping
logging_binary_name: microsoftedgeupdate.exe
friendly_logging_binary_name: Microsoft Edge Update
payload:
  {"ver":"4.0","name":"Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping","time":"2021-08-18T00:51:43.2589786Z","iKey":"P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425","ext":{"utc":{"eventFlags":258,"pgName":"ARIA","flags":1043333704,"epoch":"1107239","seq":56},"metadata":{"f":{"EventInfo.Level":4,"appChannel":4,"appConsentState":4,"appDayOfInstall":4,"appInstallTimeDiffSec":4,"appLastLaunchTime":4,"appPingEventAppSize":4,"appPingEventDoneBeforeOOBEComplete":4,"appPingEventDownloadMetricsCdnCID":4,"appPingEventDownloadMetricsDownloadTimeMs":4,"appPingEventDownloadMetricsDownloadedBytes":4,"appPingEventDownloadMetricsDownloader":4,"appPingEventDownloadMetricsError":4,"appPingEventDownloadMetricsTotalBytes":4,"appPingEventDownloadTimeMs":4,"appPingEventErrorCode":4,"appPingEventEventResult":4,"appPingEventEventType":4,"appPingEventExtraCode1":4,"appPingEventInstallTimeMs":4,"appPingEventNumBytesDownloaded":4,"appPingEventPackageCacheResult":4,"appPingEventSequenceId":4,"appPingEventSourceUrlIndex":4,"appPingEventUpdateCheckTimeMs":4,"hwDiskType":4,"hwLogicalCpus":4,"hwPhysmemory":4,"requestCheckPeriodSec":4},"privTags":2164262912},"app":{"name":"MicrosoftEdgeUpdate","id":"W:0006f9368d1ce8356b0711cefb486cce9e3d00000904!00009f76ef75fb7b0e7cbf90b96be9490600f4b34ad6!microsoftedgeupdate.exe","ver":"2021/02/19:05:54:24!43886!microsoftedgeupdate.exe","asId":145},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:EventInfo.Level;t:2","n:appChannel;t:2","n:appConsentState;t:2","n:appDayOfInstall;t:2","n:appInstallTimeDiffSec;t:2","n:appLastLaunchTime;t:2","n:appPingEventAppSize;t:2","n:appPingEventDoneBeforeOOBEComplete;t:2","n:appPingEventDownloadMetricsCdnCID;t:2","n:appPingEventDownloadMetricsDownloadTimeMs;t:2","n:appPingEventDownloadMetricsDownloadedBytes;t:2","n:appPingEventDownloadMetricsDownloader;t:2","n:appPingEventDownloadMetricsError;t:2","n:appPingEventDownloadMetricsTotalBytes;t:2","n:appPingEventDownloadTimeMs;t:2","n:appPingEventErrorCode;t:2","n:appPingEventEventResult;t:2","n:appPingEventEventType;t:2","n:appPingEventExtraCode1;t:2","n:appPingEventInstallTimeMs;t:2","n:appPingEventNumBytesDownloaded;t:2","n:appPingEventPackageCacheResult;t:2","n:appPingEventSequenceId;t:2","n:appPingEventSourceUrlIndex;t:2","n:appPingEventUpdateCheckTimeMs;t:2","n:appUpdateCheckIsUpdateDisabled;t:1","n:hwDiskType;t:2","n:hwHasAvx;t:1","n:hwHasSse;t:1","n:hwHasSse2;t:1","n:hwHasSse3;t:1","n:hwHasSse41;t:1","n:hwHasSse42;t:1","n:hwHasSsse3;t:1","n:hwLogicalCpus;t:2","n:hwPhysmemory;t:2","n:isMsftDomainJoined;t:1","n:requestCheckPeriodSec;t:2","n:requestDomainJoined;t:1","n:requestIsMachine;t:1"]},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventInfo.Level":1,"appAp":"","appAppId":"{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}","appBrandCode":"INBX","appChannel":6,"appClientId":"","appCohort":"rrf@0.91","appCohortHint":"","appCohortName":"","appConsentState":0,"appDayOfInstall":0,"appExperiments":"","appInstallTimeDiffSec":0,"appLang":"","appLastLaunchTime":0,"appNextVersion":"1.3.151.27","appPingEventAppSize":0,"appPingEventDoneBeforeOOBEComplete":-1,"appPingEventDownloadMetricsCdnCCC":"","appPingEventDownloadMetricsCdnCID":-1,"appPingEventDownloadMetricsDownloadTimeMs":0,"appPingEventDownloadMetricsDownloadedBytes":0,"appPingEventDownloadMetricsDownloader":0,"appPingEventDownloadMetricsError":0,"appPingEventDownloadMetricsServerIpHint":"","appPingEventDownloadMetricsTotalBytes":0,"appPingEventDownloadMetricsUrl":"","appPingEventDownloadTimeMs":0,"appPingEventErrorCode":0,"appPingEventEventResult":1,"appPingEventEventType":12,"appPingEventExtraCode1":0,"appPingEventInstallTimeMs":0,"appPingEventNumBytesDownloaded":0,"appPingEventPackageCacheResult":-1,"appPingEventSequenceId":1,"appPingEventSourceUrlIndex":-1,"appPingEventUpdateCheckTimeMs":0,"appUpdateCheckIsUpdateDisabled":0,"appUpdateCheckTargetVersionPrefix":"","appUpdateCheckTtToken":"","appVersion":"1.3.147.37","eventType":"EVENT_UPDATE_APPLICATION_BEGIN","expETag":"\"r452t1+k2Tgq/HXzjvFNBRhopBWR9sbjXxqeUDH9uX0=\"","hwDiskType":1,"hwHasAvx":1,"hwHasSse":1,"hwHasSse2":1,"hwHasSse3":1,"hwHasSse41":1,"hwHasSse42":1,"hwHasSsse3":1,"hwLogicalCpus":2,"hwPhysmemory":8,"isMsftDomainJoined":0,"oemProductManufacturer":"innotek GmbH","oemProductName":"VirtualBox","osArch":"x64","osPlatform":"win","osServicePack":"","osVersion":"10.0.19041.1165","requestCheckPeriodSec":-1,"requestDlpref":"","requestDomainJoined":0,"requestInstallSource":"scheduler","requestIsMachine":1,"requestOmahaShellVersion":"1.3.141.63","requestOmahaVersion":"1.3.147.37","requestProtocolVersion":"3.0","requestRequestId":"{7099BFC9-4302-4644-A384-F31DD6FA976A}","requestSessionCorrelationVectorBase":"1AgsH9uAcUy3XdqN+cI7oA","requestSessionId":"{1F2C08D4-80DB-4C71-B75D-DA8DF9C23BA0}","requestTestSource":"","requestUid":"{EACF9470-B862-4BE2-A89D-B929B99FB7A6}"}}


sid: S-1-5-18
full_event_name: Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping
logging_binary_name: microsoftedgeupdate.exe
friendly_logging_binary_name: Microsoft Edge Update
payload:
  {"ver":"4.0","name":"Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping","time":"2021-08-18T00:51:43.2591846Z","iKey":"P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425","ext":{"utc":{"eventFlags":258,"pgName":"ARIA","flags":1043333704,"epoch":"1107239","seq":57},"metadata":{"f":{"EventInfo.Level":4,"appChannel":4,"appConsentState":4,"appDayOfInstall":4,"appInstallTimeDiffSec":4,"appLastLaunchTime":4,"appPingEventAppSize":4,"appPingEventDoneBeforeOOBEComplete":4,"appPingEventDownloadMetricsCdnCID":4,"appPingEventDownloadMetricsDownloadTimeMs":4,"appPingEventDownloadMetricsDownloadedBytes":4,"appPingEventDownloadMetricsDownloader":4,"appPingEventDownloadMetricsError":4,"appPingEventDownloadMetricsTotalBytes":4,"appPingEventDownloadTimeMs":4,"appPingEventErrorCode":4,"appPingEventEventResult":4,"appPingEventEventType":4,"appPingEventExtraCode1":4,"appPingEventInstallTimeMs":4,"appPingEventNumBytesDownloaded":4,"appPingEventPackageCacheResult":4,"appPingEventSequenceId":4,"appPingEventSourceUrlIndex":4,"appPingEventUpdateCheckTimeMs":4,"hwDiskType":4,"hwLogicalCpus":4,"hwPhysmemory":4,"requestCheckPeriodSec":4},"privTags":2164262912},"app":{"name":"MicrosoftEdgeUpdate","id":"W:0006f9368d1ce8356b0711cefb486cce9e3d00000904!00009f76ef75fb7b0e7cbf90b96be9490600f4b34ad6!microsoftedgeupdate.exe","ver":"2021/02/19:05:54:24!43886!microsoftedgeupdate.exe","asId":145},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:EventInfo.Level;t:2","n:appChannel;t:2","n:appConsentState;t:2","n:appDayOfInstall;t:2","n:appInstallTimeDiffSec;t:2","n:appLastLaunchTime;t:2","n:appPingEventAppSize;t:2","n:appPingEventDoneBeforeOOBEComplete;t:2","n:appPingEventDownloadMetricsCdnCID;t:2","n:appPingEventDownloadMetricsDownloadTimeMs;t:2","n:appPingEventDownloadMetricsDownloadedBytes;t:2","n:appPingEventDownloadMetricsDownloader;t:2","n:appPingEventDownloadMetricsError;t:2","n:appPingEventDownloadMetricsTotalBytes;t:2","n:appPingEventDownloadTimeMs;t:2","n:appPingEventErrorCode;t:2","n:appPingEventEventResult;t:2","n:appPingEventEventType;t:2","n:appPingEventExtraCode1;t:2","n:appPingEventInstallTimeMs;t:2","n:appPingEventNumBytesDownloaded;t:2","n:appPingEventPackageCacheResult;t:2","n:appPingEventSequenceId;t:2","n:appPingEventSourceUrlIndex;t:2","n:appPingEventUpdateCheckTimeMs;t:2","n:appUpdateCheckIsUpdateDisabled;t:1","n:hwDiskType;t:2","n:hwHasAvx;t:1","n:hwHasSse;t:1","n:hwHasSse2;t:1","n:hwHasSse3;t:1","n:hwHasSse41;t:1","n:hwHasSse42;t:1","n:hwHasSsse3;t:1","n:hwLogicalCpus;t:2","n:hwPhysmemory;t:2","n:isMsftDomainJoined;t:1","n:requestCheckPeriodSec;t:2","n:requestDomainJoined;t:1","n:requestIsMachine;t:1"]},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventInfo.Level":1,"appAp":"","appAppId":"{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}","appBrandCode":"INBX","appChannel":6,"appClientId":"","appCohort":"rrf@0.91","appCohortHint":"","appCohortName":"","appConsentState":0,"appDayOfInstall":0,"appExperiments":"","appInstallTimeDiffSec":0,"appLang":"","appLastLaunchTime":0,"appNextVersion":"1.3.151.27","appPingEventAppSize":0,"appPingEventDoneBeforeOOBEComplete":-1,"appPingEventDownloadMetricsCdnCCC":"","appPingEventDownloadMetricsCdnCID":-1,"appPingEventDownloadMetricsDownloadTimeMs":0,"appPingEventDownloadMetricsDownloadedBytes":0,"appPingEventDownloadMetricsDownloader":0,"appPingEventDownloadMetricsError":0,"appPingEventDownloadMetricsServerIpHint":"","appPingEventDownloadMetricsTotalBytes":0,"appPingEventDownloadMetricsUrl":"","appPingEventDownloadTimeMs":0,"appPingEventErrorCode":0,"appPingEventEventResult":1,"appPingEventEventType":13,"appPingEventExtraCode1":0,"appPingEventInstallTimeMs":0,"appPingEventNumBytesDownloaded":0,"appPingEventPackageCacheResult":-1,"appPingEventSequenceId":2,"appPingEventSourceUrlIndex":-1,"appPingEventUpdateCheckTimeMs":0,"appUpdateCheckIsUpdateDisabled":0,"appUpdateCheckTargetVersionPrefix":"","appUpdateCheckTtToken":"","appVersion":"1.3.147.37","eventType":"EVENT_UPDATE_DOWNLOAD_START","expETag":"\"r452t1+k2Tgq/HXzjvFNBRhopBWR9sbjXxqeUDH9uX0=\"","hwDiskType":1,"hwHasAvx":1,"hwHasSse":1,"hwHasSse2":1,"hwHasSse3":1,"hwHasSse41":1,"hwHasSse42":1,"hwHasSsse3":1,"hwLogicalCpus":2,"hwPhysmemory":8,"isMsftDomainJoined":0,"oemProductManufacturer":"innotek GmbH","oemProductName":"VirtualBox","osArch":"x64","osPlatform":"win","osServicePack":"","osVersion":"10.0.19041.1165","requestCheckPeriodSec":-1,"requestDlpref":"","requestDomainJoined":0,"requestInstallSource":"scheduler","requestIsMachine":1,"requestOmahaShellVersion":"1.3.141.63","requestOmahaVersion":"1.3.147.37","requestProtocolVersion":"3.0","requestRequestId":"{7099BFC9-4302-4644-A384-F31DD6FA976A}","requestSessionCorrelationVectorBase":"1AgsH9uAcUy3XdqN+cI7oA","requestSessionId":"{1F2C08D4-80DB-4C71-B75D-DA8DF9C23BA0}","requestTestSource":"","requestUid":"{EACF9470-B862-4BE2-A89D-B929B99FB7A6}"}}


sid: S-1-5-18
full_event_name: Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping
logging_binary_name: microsoftedgeupdate.exe
friendly_logging_binary_name: Microsoft Edge Update
payload:
  {"ver":"4.0","name":"Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping","time":"2021-08-18T00:51:43.2593292Z","iKey":"P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425","ext":{"utc":{"eventFlags":258,"pgName":"ARIA","flags":1043333704,"epoch":"1107239","seq":58},"metadata":{"f":{"EventInfo.Level":4,"appChannel":4,"appConsentState":4,"appDayOfInstall":4,"appInstallTimeDiffSec":4,"appLastLaunchTime":4,"appPingEventAppSize":4,"appPingEventDoneBeforeOOBEComplete":4,"appPingEventDownloadMetricsCdnCID":4,"appPingEventDownloadMetricsDownloadTimeMs":4,"appPingEventDownloadMetricsDownloadedBytes":4,"appPingEventDownloadMetricsDownloader":4,"appPingEventDownloadMetricsError":4,"appPingEventDownloadMetricsTotalBytes":4,"appPingEventDownloadTimeMs":4,"appPingEventErrorCode":4,"appPingEventEventResult":4,"appPingEventEventType":4,"appPingEventExtraCode1":4,"appPingEventInstallTimeMs":4,"appPingEventNumBytesDownloaded":4,"appPingEventPackageCacheResult":4,"appPingEventSequenceId":4,"appPingEventSourceUrlIndex":4,"appPingEventUpdateCheckTimeMs":4,"hwDiskType":4,"hwLogicalCpus":4,"hwPhysmemory":4,"requestCheckPeriodSec":4},"privTags":2164262912},"app":{"name":"MicrosoftEdgeUpdate","id":"W:0006f9368d1ce8356b0711cefb486cce9e3d00000904!00009f76ef75fb7b0e7cbf90b96be9490600f4b34ad6!microsoftedgeupdate.exe","ver":"2021/02/19:05:54:24!43886!microsoftedgeupdate.exe","asId":145},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:EventInfo.Level;t:2","n:appChannel;t:2","n:appConsentState;t:2","n:appDayOfInstall;t:2","n:appInstallTimeDiffSec;t:2","n:appLastLaunchTime;t:2","n:appPingEventAppSize;t:2","n:appPingEventDoneBeforeOOBEComplete;t:2","n:appPingEventDownloadMetricsCdnCID;t:2","n:appPingEventDownloadMetricsDownloadTimeMs;t:2","n:appPingEventDownloadMetricsDownloadedBytes;t:2","n:appPingEventDownloadMetricsDownloader;t:2","n:appPingEventDownloadMetricsError;t:2","n:appPingEventDownloadMetricsTotalBytes;t:2","n:appPingEventDownloadTimeMs;t:2","n:appPingEventErrorCode;t:2","n:appPingEventEventResult;t:2","n:appPingEventEventType;t:2","n:appPingEventExtraCode1;t:2","n:appPingEventInstallTimeMs;t:2","n:appPingEventNumBytesDownloaded;t:2","n:appPingEventPackageCacheResult;t:2","n:appPingEventSequenceId;t:2","n:appPingEventSourceUrlIndex;t:2","n:appPingEventUpdateCheckTimeMs;t:2","n:appUpdateCheckIsUpdateDisabled;t:1","n:hwDiskType;t:2","n:hwHasAvx;t:1","n:hwHasSse;t:1","n:hwHasSse2;t:1","n:hwHasSse3;t:1","n:hwHasSse41;t:1","n:hwHasSse42;t:1","n:hwHasSsse3;t:1","n:hwLogicalCpus;t:2","n:hwPhysmemory;t:2","n:isMsftDomainJoined;t:1","n:requestCheckPeriodSec;t:2","n:requestDomainJoined;t:1","n:requestIsMachine;t:1"]},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventInfo.Level":1,"appAp":"","appAppId":"{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}","appBrandCode":"INBX","appChannel":6,"appClientId":"","appCohort":"rrf@0.91","appCohortHint":"","appCohortName":"","appConsentState":0,"appDayOfInstall":0,"appExperiments":"","appInstallTimeDiffSec":0,"appLang":"","appLastLaunchTime":0,"appNextVersion":"1.3.151.27","appPingEventAppSize":0,"appPingEventDoneBeforeOOBEComplete":-1,"appPingEventDownloadMetricsCdnCCC":"AU","appPingEventDownloadMetricsCdnCID":2,"appPingEventDownloadMetricsDownloadTimeMs":2703,"appPingEventDownloadMetricsDownloadedBytes":1777568,"appPingEventDownloadMetricsDownloader":1,"appPingEventDownloadMetricsError":0,"appPingEventDownloadMetricsServerIpHint":"123.253.149.72","appPingEventDownloadMetricsTotalBytes":1777568,"appPingEventDownloadMetricsUrl":"http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/88328d0b-b913-47f9-939f-401b09acd76d?P1=1629852702&P2=404&P3=2&P4=RJMuam9E5UoaSsQG2zRF9ctOfIj1RP22X7kTygWJPDqJH7tKLFmU7R6HDCATmoxFxwWc5EeHYi2bnPX711jXtg%3d%3d","appPingEventDownloadTimeMs":0,"appPingEventErrorCode":0,"appPingEventEventResult":1,"appPingEventEventType":14,"appPingEventExtraCode1":0,"appPingEventInstallTimeMs":0,"appPingEventNumBytesDownloaded":0,"appPingEventPackageCacheResult":-1,"appPingEventSequenceId":3,"appPingEventSourceUrlIndex":0,"appPingEventUpdateCheckTimeMs":0,"appUpdateCheckIsUpdateDisabled":0,"appUpdateCheckTargetVersionPrefix":"","appUpdateCheckTtToken":"","appVersion":"1.3.147.37","eventType":"EVENT_UPDATE_DOWNLOAD_FINISH","expETag":"\"r452t1+k2Tgq/HXzjvFNBRhopBWR9sbjXxqeUDH9uX0=\"","hwDiskType":1,"hwHasAvx":1,"hwHasSse":1,"hwHasSse2":1,"hwHasSse3":1,"hwHasSse41":1,"hwHasSse42":1,"hwHasSsse3":1,"hwLogicalCpus":2,"hwPhysmemory":8,"isMsftDomainJoined":0,"oemProductManufacturer":"innotek GmbH","oemProductName":"VirtualBox","osArch":"x64","osPlatform":"win","osServicePack":"","osVersion":"10.0.19041.1165","requestCheckPeriodSec":-1,"requestDlpref":"","requestDomainJoined":0,"requestInstallSource":"scheduler","requestIsMachine":1,"requestOmahaShellVersion":"1.3.141.63","requestOmahaVersion":"1.3.147.37","requestProtocolVersion":"3.0","requestRequestId":"{7099BFC9-4302-4644-A384-F31DD6FA976A}","requestSessionCorrelationVectorBase":"1AgsH9uAcUy3XdqN+cI7oA","requestSessionId":"{1F2C08D4-80DB-4C71-B75D-DA8DF9C23BA0}","requestTestSource":"","requestUid":"{EACF9470-B862-4BE2-A89D-B929B99FB7A6}"}}


sid: S-1-5-18
full_event_name: Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping
logging_binary_name: microsoftedgeupdate.exe
friendly_logging_binary_name: Microsoft Edge Update
payload:
  {"ver":"4.0","name":"Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping","time":"2021-08-18T00:51:43.2594716Z","iKey":"P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425","ext":{"utc":{"eventFlags":258,"pgName":"ARIA","flags":1043333704,"epoch":"1107239","seq":59},"metadata":{"f":{"EventInfo.Level":4,"appChannel":4,"appConsentState":4,"appDayOfInstall":4,"appInstallTimeDiffSec":4,"appLastLaunchTime":4,"appPingEventAppSize":4,"appPingEventDoneBeforeOOBEComplete":4,"appPingEventDownloadMetricsCdnCID":4,"appPingEventDownloadMetricsDownloadTimeMs":4,"appPingEventDownloadMetricsDownloadedBytes":4,"appPingEventDownloadMetricsDownloader":4,"appPingEventDownloadMetricsError":4,"appPingEventDownloadMetricsTotalBytes":4,"appPingEventDownloadTimeMs":4,"appPingEventErrorCode":4,"appPingEventEventResult":4,"appPingEventEventType":4,"appPingEventExtraCode1":4,"appPingEventInstallTimeMs":4,"appPingEventNumBytesDownloaded":4,"appPingEventPackageCacheResult":4,"appPingEventSequenceId":4,"appPingEventSourceUrlIndex":4,"appPingEventUpdateCheckTimeMs":4,"hwDiskType":4,"hwLogicalCpus":4,"hwPhysmemory":4,"requestCheckPeriodSec":4},"privTags":2164262912},"app":{"name":"MicrosoftEdgeUpdate","id":"W:0006f9368d1ce8356b0711cefb486cce9e3d00000904!00009f76ef75fb7b0e7cbf90b96be9490600f4b34ad6!microsoftedgeupdate.exe","ver":"2021/02/19:05:54:24!43886!microsoftedgeupdate.exe","asId":145},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:EventInfo.Level;t:2","n:appChannel;t:2","n:appConsentState;t:2","n:appDayOfInstall;t:2","n:appInstallTimeDiffSec;t:2","n:appLastLaunchTime;t:2","n:appPingEventAppSize;t:2","n:appPingEventDoneBeforeOOBEComplete;t:2","n:appPingEventDownloadMetricsCdnCID;t:2","n:appPingEventDownloadMetricsDownloadTimeMs;t:2","n:appPingEventDownloadMetricsDownloadedBytes;t:2","n:appPingEventDownloadMetricsDownloader;t:2","n:appPingEventDownloadMetricsError;t:2","n:appPingEventDownloadMetricsTotalBytes;t:2","n:appPingEventDownloadTimeMs;t:2","n:appPingEventErrorCode;t:2","n:appPingEventEventResult;t:2","n:appPingEventEventType;t:2","n:appPingEventExtraCode1;t:2","n:appPingEventInstallTimeMs;t:2","n:appPingEventNumBytesDownloaded;t:2","n:appPingEventPackageCacheResult;t:2","n:appPingEventSequenceId;t:2","n:appPingEventSourceUrlIndex;t:2","n:appPingEventUpdateCheckTimeMs;t:2","n:appUpdateCheckIsUpdateDisabled;t:1","n:hwDiskType;t:2","n:hwHasAvx;t:1","n:hwHasSse;t:1","n:hwHasSse2;t:1","n:hwHasSse3;t:1","n:hwHasSse41;t:1","n:hwHasSse42;t:1","n:hwHasSsse3;t:1","n:hwLogicalCpus;t:2","n:hwPhysmemory;t:2","n:isMsftDomainJoined;t:1","n:requestCheckPeriodSec;t:2","n:requestDomainJoined;t:1","n:requestIsMachine;t:1"]},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventInfo.Level":1,"appAp":"","appAppId":"{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}","appBrandCode":"INBX","appChannel":6,"appClientId":"","appCohort":"rrf@0.91","appCohortHint":"","appCohortName":"","appConsentState":0,"appDayOfInstall":0,"appExperiments":"","appInstallTimeDiffSec":0,"appLang":"","appLastLaunchTime":0,"appNextVersion":"1.3.151.27","appPingEventAppSize":0,"appPingEventDoneBeforeOOBEComplete":-1,"appPingEventDownloadMetricsCdnCCC":"","appPingEventDownloadMetricsCdnCID":-1,"appPingEventDownloadMetricsDownloadTimeMs":0,"appPingEventDownloadMetricsDownloadedBytes":0,"appPingEventDownloadMetricsDownloader":0,"appPingEventDownloadMetricsError":0,"appPingEventDownloadMetricsServerIpHint":"","appPingEventDownloadMetricsTotalBytes":0,"appPingEventDownloadMetricsUrl":"","appPingEventDownloadTimeMs":0,"appPingEventErrorCode":0,"appPingEventEventResult":1,"appPingEventEventType":14,"appPingEventExtraCode1":0,"appPingEventInstallTimeMs":0,"appPingEventNumBytesDownloaded":0,"appPingEventPackageCacheResult":-1,"appPingEventSequenceId":4,"appPingEventSourceUrlIndex":-1,"appPingEventUpdateCheckTimeMs":0,"appUpdateCheckIsUpdateDisabled":0,"appUpdateCheckTargetVersionPrefix":"","appUpdateCheckTtToken":"","appVersion":"1.3.147.37","eventType":"EVENT_UPDATE_DOWNLOAD_FINISH","expETag":"\"r452t1+k2Tgq/HXzjvFNBRhopBWR9sbjXxqeUDH9uX0=\"","hwDiskType":1,"hwHasAvx":1,"hwHasSse":1,"hwHasSse2":1,"hwHasSse3":1,"hwHasSse41":1,"hwHasSse42":1,"hwHasSsse3":1,"hwLogicalCpus":2,"hwPhysmemory":8,"isMsftDomainJoined":0,"oemProductManufacturer":"innotek GmbH","oemProductName":"VirtualBox","osArch":"x64","osPlatform":"win","osServicePack":"","osVersion":"10.0.19041.1165","requestCheckPeriodSec":-1,"requestDlpref":"","requestDomainJoined":0,"requestInstallSource":"scheduler","requestIsMachine":1,"requestOmahaShellVersion":"1.3.141.63","requestOmahaVersion":"1.3.147.37","requestProtocolVersion":"3.0","requestRequestId":"{7099BFC9-4302-4644-A384-F31DD6FA976A}","requestSessionCorrelationVectorBase":"1AgsH9uAcUy3XdqN+cI7oA","requestSessionId":"{1F2C08D4-80DB-4C71-B75D-DA8DF9C23BA0}","requestTestSource":"","requestUid":"{EACF9470-B862-4BE2-A89D-B929B99FB7A6}"}}


sid: S-1-5-18
full_event_name: Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping
logging_binary_name: microsoftedgeupdate.exe
friendly_logging_binary_name: Microsoft Edge Update
payload:
  {"ver":"4.0","name":"Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping","time":"2021-08-18T00:51:43.2596277Z","iKey":"P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425","ext":{"utc":{"eventFlags":258,"pgName":"ARIA","flags":1043333704,"epoch":"1107239","seq":60},"metadata":{"f":{"EventInfo.Level":4,"appChannel":4,"appConsentState":4,"appDayOfInstall":4,"appInstallTimeDiffSec":4,"appLastLaunchTime":4,"appPingEventAppSize":4,"appPingEventDoneBeforeOOBEComplete":4,"appPingEventDownloadMetricsCdnCID":4,"appPingEventDownloadMetricsDownloadTimeMs":4,"appPingEventDownloadMetricsDownloadedBytes":4,"appPingEventDownloadMetricsDownloader":4,"appPingEventDownloadMetricsError":4,"appPingEventDownloadMetricsTotalBytes":4,"appPingEventDownloadTimeMs":4,"appPingEventErrorCode":4,"appPingEventEventResult":4,"appPingEventEventType":4,"appPingEventExtraCode1":4,"appPingEventInstallTimeMs":4,"appPingEventNumBytesDownloaded":4,"appPingEventPackageCacheResult":4,"appPingEventSequenceId":4,"appPingEventSourceUrlIndex":4,"appPingEventUpdateCheckTimeMs":4,"hwDiskType":4,"hwLogicalCpus":4,"hwPhysmemory":4,"requestCheckPeriodSec":4},"privTags":2164262912},"app":{"name":"MicrosoftEdgeUpdate","id":"W:0006f9368d1ce8356b0711cefb486cce9e3d00000904!00009f76ef75fb7b0e7cbf90b96be9490600f4b34ad6!microsoftedgeupdate.exe","ver":"2021/02/19:05:54:24!43886!microsoftedgeupdate.exe","asId":145},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:EventInfo.Level;t:2","n:appChannel;t:2","n:appConsentState;t:2","n:appDayOfInstall;t:2","n:appInstallTimeDiffSec;t:2","n:appLastLaunchTime;t:2","n:appPingEventAppSize;t:2","n:appPingEventDoneBeforeOOBEComplete;t:2","n:appPingEventDownloadMetricsCdnCID;t:2","n:appPingEventDownloadMetricsDownloadTimeMs;t:2","n:appPingEventDownloadMetricsDownloadedBytes;t:2","n:appPingEventDownloadMetricsDownloader;t:2","n:appPingEventDownloadMetricsError;t:2","n:appPingEventDownloadMetricsTotalBytes;t:2","n:appPingEventDownloadTimeMs;t:2","n:appPingEventErrorCode;t:2","n:appPingEventEventResult;t:2","n:appPingEventEventType;t:2","n:appPingEventExtraCode1;t:2","n:appPingEventInstallTimeMs;t:2","n:appPingEventNumBytesDownloaded;t:2","n:appPingEventPackageCacheResult;t:2","n:appPingEventSequenceId;t:2","n:appPingEventSourceUrlIndex;t:2","n:appPingEventUpdateCheckTimeMs;t:2","n:appUpdateCheckIsUpdateDisabled;t:1","n:hwDiskType;t:2","n:hwHasAvx;t:1","n:hwHasSse;t:1","n:hwHasSse2;t:1","n:hwHasSse3;t:1","n:hwHasSse41;t:1","n:hwHasSse42;t:1","n:hwHasSsse3;t:1","n:hwLogicalCpus;t:2","n:hwPhysmemory;t:2","n:isMsftDomainJoined;t:1","n:requestCheckPeriodSec;t:2","n:requestDomainJoined;t:1","n:requestIsMachine;t:1"]},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventInfo.Level":1,"appAp":"","appAppId":"{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}","appBrandCode":"INBX","appChannel":6,"appClientId":"","appCohort":"rrf@0.91","appCohortHint":"","appCohortName":"","appConsentState":0,"appDayOfInstall":0,"appExperiments":"","appInstallTimeDiffSec":0,"appLang":"","appLastLaunchTime":0,"appNextVersion":"1.3.151.27","appPingEventAppSize":0,"appPingEventDoneBeforeOOBEComplete":-1,"appPingEventDownloadMetricsCdnCCC":"","appPingEventDownloadMetricsCdnCID":-1,"appPingEventDownloadMetricsDownloadTimeMs":0,"appPingEventDownloadMetricsDownloadedBytes":0,"appPingEventDownloadMetricsDownloader":0,"appPingEventDownloadMetricsError":0,"appPingEventDownloadMetricsServerIpHint":"","appPingEventDownloadMetricsTotalBytes":0,"appPingEventDownloadMetricsUrl":"","appPingEventDownloadTimeMs":0,"appPingEventErrorCode":0,"appPingEventEventResult":1,"appPingEventEventType":15,"appPingEventExtraCode1":0,"appPingEventInstallTimeMs":0,"appPingEventNumBytesDownloaded":0,"appPingEventPackageCacheResult":-1,"appPingEventSequenceId":5,"appPingEventSourceUrlIndex":-1,"appPingEventUpdateCheckTimeMs":0,"appUpdateCheckIsUpdateDisabled":0,"appUpdateCheckTargetVersionPrefix":"","appUpdateCheckTtToken":"","appVersion":"1.3.147.37","eventType":"EVENT_UPDATE_INSTALLER_START","expETag":"\"r452t1+k2Tgq/HXzjvFNBRhopBWR9sbjXxqeUDH9uX0=\"","hwDiskType":1,"hwHasAvx":1,"hwHasSse":1,"hwHasSse2":1,"hwHasSse3":1,"hwHasSse41":1,"hwHasSse42":1,"hwHasSsse3":1,"hwLogicalCpus":2,"hwPhysmemory":8,"isMsftDomainJoined":0,"oemProductManufacturer":"innotek GmbH","oemProductName":"VirtualBox","osArch":"x64","osPlatform":"win","osServicePack":"","osVersion":"10.0.19041.1165","requestCheckPeriodSec":-1,"requestDlpref":"","requestDomainJoined":0,"requestInstallSource":"scheduler","requestIsMachine":1,"requestOmahaShellVersion":"1.3.141.63","requestOmahaVersion":"1.3.147.37","requestProtocolVersion":"3.0","requestRequestId":"{7099BFC9-4302-4644-A384-F31DD6FA976A}","requestSessionCorrelationVectorBase":"1AgsH9uAcUy3XdqN+cI7oA","requestSessionId":"{1F2C08D4-80DB-4C71-B75D-DA8DF9C23BA0}","requestTestSource":"","requestUid":"{EACF9470-B862-4BE2-A89D-B929B99FB7A6}"}}


sid: S-1-5-20
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?dosvc.dll?
friendly_logging_binary_name: Delivery Optimization
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-18T00:51:44.0196471Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":61},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.1.1.3.1.2"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":87},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:2CD5BDB8-5AAC-E974-9C40-74864CF5B277"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"594CC383-55A0-4FC0-BEC7-CA3E95DE1F1B","predefinedCallerName":"WU Client Download","updateID":"{A83C4ABC-9D3C-46CA-9A50-82B5A0375395}","jobID":"6EC3E24A-A794-40B3-94EF-81C1FD5AA912","fileID":"1ea6721710b7a933834949001f3291bdb1696a80","bytesRequested":659904,"fileSize":659904,"bytesFromCDN":659904,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":0,"dataSourcesTotal":"2:659904;","cdnUrl":"http://3.au.download.windowsupdate.com/d/msdownload/update/software/defu/2021/08/am_delta_patch_1.345.673.0_1ea6721710b7a933834949001f3291bdb1696a80.exe","cdnIp":"[8.246.9.126]:80;X-CCC:AU;X-CID:3;","routeToCacheServer":"","numPeers":0,"numPeersLocal":0,"expiresAt":"2021-08-18T00:52:44.0192584Z","cdnConnectionCount":2,"cacheServerConnectionCount":0,"lanConnectionCount":0,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":0,"uplinkBps":0,"downlinkUsageBps":659904,"uplinkUsageBps":0,"totalTimeMs":923,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":99,"downloadModeSrc":99,"downloadModeReason":-2133835749,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-18T00:51:44.0716097Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":62},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2,"StatusCode":2,"ExtendedStatusCode":2,"IPVersion":2,"NetworkCost":2,"NetworkRestrictionStatus":2,"ConnectTime":4,"CDNId":2,"ActiveDownloadTime":4,"RepeatFailCount":2,"BytesDownloaded":5,"TotalExpectedBytes":5,"BundleBytesDownloaded":5,"BundleRepeatFailCount":2,"PostDnldTime":2,"SizeCalcTime":2}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.1.1.7.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"86B8833F-7159-446E-911D-83DBDE112E33","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":3,"UpdateId":"A83C4ABC-9D3C-46CA-9A50-82B5A0375395","RevisionNumber":200,"BundleId":"598D6AD8-F3A8-4B2F-846B-4F5A86554203","BundleRevisionNumber":200,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0,"StatusCode":0,"ExtendedStatusCode":0,"IPVersion":1,"NetworkCost":1,"NetworkRestrictionStatus":1,"ConnectTime":0,"HostName":"download.windowsupdate.com","CDNId":3,"CDNCountryCode":"AU","ActiveDownloadTime":1,"RepeatFailCount":0,"BytesDownloaded":659904,"TotalExpectedBytes":0,"UsedDO":true,"CbsMethod":0,"BundleBytesDownloaded":659904,"BundleRepeatFailCount":0,"AppXBlockHashFailures":0,"AppXScope":"","PostDnldTime":0,"SizeCalcTime":0}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-18T00:51:44.3819519Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":63},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.1.2.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"D1341FDB-8187-4C5B-959A-BE129372F309","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":3,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"A83C4ABC-9D3C-46CA-9A50-82B5A0375395","RevisionNumber":200,"BundleId":"598D6AD8-F3A8-4B2F-846B-4F5A86554203","BundleRevisionNumber":200,"HandlerType":0,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":2,"DeploymentProviderHostModule":"wuapi.dll","ClassificationId":"E0789628-CE08-4437-BE74-2495B842F43B","DeploymentMutexId":"8c3fcc84-7410-4a95-8b89-a166a0190486","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-18
full_event_name: Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping
logging_binary_name: microsoftedgeupdate.exe
friendly_logging_binary_name: Microsoft Edge Update
payload:
  {"ver":"4.0","name":"Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping","time":"2021-08-18T00:51:45.5410740Z","iKey":"P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425","ext":{"utc":{"eventFlags":258,"pgName":"ARIA","flags":1043333704,"epoch":"1107239","seq":64},"metadata":{"f":{"EventInfo.Level":4,"appChannel":4,"appConsentState":4,"appDayOfInstall":4,"appInstallTime":4,"appInstallTimeDiffSec":4,"appLastLaunchTime":4,"appPingEventAppSize":4,"appPingEventDoneBeforeOOBEComplete":4,"appPingEventDownloadMetricsCdnCID":4,"appPingEventDownloadMetricsDownloadTimeMs":4,"appPingEventDownloadMetricsDownloadedBytes":4,"appPingEventDownloadMetricsDownloader":4,"appPingEventDownloadMetricsError":4,"appPingEventDownloadMetricsTotalBytes":4,"appPingEventDownloadTimeMs":4,"appPingEventErrorCode":4,"appPingEventEventResult":4,"appPingEventEventType":4,"appPingEventExtraCode1":4,"appPingEventInstallTimeMs":4,"appPingEventNumBytesDownloaded":4,"appPingEventPackageCacheResult":4,"appPingEventSequenceId":4,"appPingEventSourceUrlIndex":4,"appPingEventUpdateCheckTimeMs":4,"appReferralHash":4,"hwDiskType":4,"hwLogicalCpus":4,"hwPhysmemory":4,"requestCheckPeriodSec":4},"privTags":2164262912},"app":{"name":"MicrosoftEdgeUpdate","id":"W:0006f9368d1ce8356b0711cefb486cce9e3d00000904!00009f76ef75fb7b0e7cbf90b96be9490600f4b34ad6!microsoftedgeupdate.exe","ver":"2021/02/19:05:54:24!43886!microsoftedgeupdate.exe","asId":155},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:EventInfo.Level;t:2","n:appChannel;t:2","n:appConsentState;t:2","n:appDayOfInstall;t:2","n:appInstallTime;t:2","n:appInstallTimeDiffSec;t:2","n:appLastLaunchTime;t:2","n:appPingEventAppSize;t:2","n:appPingEventDoneBeforeOOBEComplete;t:2","n:appPingEventDownloadMetricsCdnCID;t:2","n:appPingEventDownloadMetricsDownloadTimeMs;t:2","n:appPingEventDownloadMetricsDownloadedBytes;t:2","n:appPingEventDownloadMetricsDownloader;t:2","n:appPingEventDownloadMetricsError;t:2","n:appPingEventDownloadMetricsTotalBytes;t:2","n:appPingEventDownloadTimeMs;t:2","n:appPingEventErrorCode;t:2","n:appPingEventEventResult;t:2","n:appPingEventEventType;t:2","n:appPingEventExtraCode1;t:2","n:appPingEventInstallTimeMs;t:2","n:appPingEventNumBytesDownloaded;t:2","n:appPingEventPackageCacheResult;t:2","n:appPingEventSequenceId;t:2","n:appPingEventSourceUrlIndex;t:2","n:appPingEventUpdateCheckTimeMs;t:2","n:appReferralHash;t:2","n:appUpdateCheckIsUpdateDisabled;t:1","n:hwDiskType;t:2","n:hwHasAvx;t:1","n:hwHasSse;t:1","n:hwHasSse2;t:1","n:hwHasSse3;t:1","n:hwHasSse41;t:1","n:hwHasSse42;t:1","n:hwHasSsse3;t:1","n:hwLogicalCpus;t:2","n:hwPhysmemory;t:2","n:isMsftDomainJoined;t:1","n:requestCheckPeriodSec;t:2","n:requestDomainJoined;t:1","n:requestIsMachine;t:1"]},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventInfo.Level":1,"appAp":"","appAppId":"{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}","appBrandCode":"INBX","appChannel":6,"appClientId":"","appCohort":"rrf@0.91","appCohortHint":"","appCohortName":"","appConsentState":0,"appDayOfInstall":0,"appExperiments":"","appInstallTime":0,"appInstallTimeDiffSec":0,"appLang":"","appLastLaunchTime":0,"appNextVersion":"1.3.151.27","appPingEventAppSize":0,"appPingEventDoneBeforeOOBEComplete":-1,"appPingEventDownloadMetricsCdnCCC":"","appPingEventDownloadMetricsCdnCID":-1,"appPingEventDownloadMetricsDownloadTimeMs":0,"appPingEventDownloadMetricsDownloadedBytes":0,"appPingEventDownloadMetricsDownloader":0,"appPingEventDownloadMetricsError":0,"appPingEventDownloadMetricsServerIpHint":"","appPingEventDownloadMetricsTotalBytes":0,"appPingEventDownloadMetricsUrl":"","appPingEventDownloadTimeMs":0,"appPingEventErrorCode":0,"appPingEventEventResult":1,"appPingEventEventType":3,"appPingEventExtraCode1":0,"appPingEventInstallTimeMs":0,"appPingEventNumBytesDownloaded":0,"appPingEventPackageCacheResult":-1,"appPingEventSequenceId":1,"appPingEventSourceUrlIndex":-1,"appPingEventUpdateCheckTimeMs":0,"appReferralHash":0,"appUpdateCheckIsUpdateDisabled":0,"appUpdateCheckTargetVersionPrefix":"","appUpdateCheckTtToken":"","appVersion":"1.3.147.37","eventType":"EVENT_UPDATE_COMPLETE","expETag":"\"r452t1+k2Tgq/HXzjvFNBRhopBWR9sbjXxqeUDH9uX0=\"","hwDiskType":1,"hwHasAvx":1,"hwHasSse":1,"hwHasSse2":1,"hwHasSse3":1,"hwHasSse41":1,"hwHasSse42":1,"hwHasSsse3":1,"hwLogicalCpus":2,"hwPhysmemory":8,"isMsftDomainJoined":0,"oemProductManufacturer":"innotek GmbH","oemProductName":"VirtualBox","osArch":"x64","osPlatform":"win","osServicePack":"","osVersion":"10.0.19041.1165","requestCheckPeriodSec":-1,"requestDlpref":"","requestDomainJoined":0,"requestInstallSource":"selfupdate","requestIsMachine":1,"requestOmahaShellVersion":"1.3.141.63","requestOmahaVersion":"1.3.151.27","requestProtocolVersion":"3.0","requestRequestId":"{F979112D-7A4E-4399-806D-57C1A2EC6466}","requestSessionCorrelationVectorBase":"1AgsH9uAcUy3XdqN+cI7oA","requestSessionId":"{1F2C08D4-80DB-4C71-B75D-DA8DF9C23BA0}","requestTestSource":"","requestUid":"{EACF9470-B862-4BE2-A89D-B929B99FB7A6}"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-18T00:51:49.2598757Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":65},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"/RwxnMS+m0G+BEUb.1.2.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"29183BCE-5D3E-45C4-8A84-DD60187AF546","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":3,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"A83C4ABC-9D3C-46CA-9A50-82B5A0375395","RevisionNumber":200,"BundleId":"598D6AD8-F3A8-4B2F-846B-4F5A86554203","BundleRevisionNumber":200,"HandlerType":0,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":2,"DeploymentProviderHostModule":"wuapi.dll","ClassificationId":"E0789628-CE08-4437-BE74-2495B842F43B","DeploymentMutexId":"8c3fcc84-7410-4a95-8b89-a166a0190486","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-18
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-18T00:54:05.8193852Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"646955BB-2AEB-41C2-9072-5B879BE69981","flags":1009779272,"epoch":"1107239","seq":66},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":9},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!000069a1dcf6a41bc750cacec3185c99839c079275bd!csrss.exe","AppVersion":"1971/05/25:13:07:28!F55D!csrss.exe","CommandLineHash":3422062667,"AppSessionId":"00000208-0001-000B-1E54-D326CA93D701","AggregationStartTime":"2021-08-18T00:44:07.5093217Z","AggregationDurationMS":598312,"InFocusDurationMS":0,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":9,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":2,"CompositionDirtyPropagatedSec":22,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":598312,"EventSequence":1}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:54:11.7530364Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":67},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"IsWUfBFederatedScanDisabled":2,"ActivityMatchingId":8}},"mscv":{"cV":"JdmO9ELDQkS3Pyle.1.0.0.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"00000000-0000-0000-0000-000000000000","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Windows Defender","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"IsWUfBFederatedScanDisabled":-1,"ClientVersion":"10.0.19041.1151","ActivityMatchingId":"6BD27BFE-87A7-428B-887B-7AD5ED413511"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:54:11.7621745Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":68},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"IsWUfBFederatedScanDisabled":2,"ActivityMatchingId":8}},"mscv":{"cV":"JdmO9ELDQkS3Pyle.1.1.0.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"00000000-0000-0000-0000-000000000000","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Windows Defender","ProcessName":"","ServiceGuid":"8B24B027-1DEE-BABB-9A95-3517DFB9C552","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"IsWUfBFederatedScanDisabled":-1,"ClientVersion":"10.0.19041.1151","ActivityMatchingId":"B5D60BF9-1A9C-41FC-9E45-AEFC2CB56D4A"}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:54:14.8469074Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":69},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"JdmO9ELDQkS3Pyle.1.0.0.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"AB04B7ED-037E-427A-A562-0A5A50B4FBB1","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Windows Defender","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"6BD27BFE-87A7-428B-887B-7AD5ED413511","SyncType":4,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":1,"ScanDurationInSeconds":3,"ScanEnqueueTime":0,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":204,"NumberOfNewUpdatesFromServiceSync":30,"ServiceUrl":"https://fe2cr.update.microsoft.com/v6/ClientWebService/client.asmx","Online":true,"AllowCachedResults":false,"MetadataIntegrityMode":3,"TotalNumMetadataSignatures":62,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":0,"ScanProps":1,"NumberOfApplicableUpdates":0,"ApplicableUpdateInfo":"","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-18
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?SIHClient.exe?
friendly_logging_binary_name: SIH Client
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-18T00:54:16.6919646Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":70},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"JdmO9ELDQkS3Pyle.1.1.0.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000066f5e6dade65d7dba979602830d58e53e60fdffb!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":132},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"856144F0-ABBE-4023-A9BE-67C525A43909","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Windows Defender","ProcessName":"","ServiceGuid":"8B24B027-1DEE-BABB-9A95-3517DFB9C552","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"B5D60BF9-1A9C-41FC-9E45-AEFC2CB56D4A","SyncType":2,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":0,"ScanDurationInSeconds":4,"ScanEnqueueTime":3,"NumberOfLoop":1,"NumberOfUpdatesEvaluated":74,"NumberOfNewUpdatesFromServiceSync":0,"ServiceUrl":"https://fe3cr.delivery.mp.microsoft.com/ClientWebService/client.asmx","Online":true,"AllowCachedResults":false,"MetadataIntegrityMode":3,"TotalNumMetadataSignatures":0,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":0,"ScanProps":1,"NumberOfApplicableUpdates":0,"ApplicableUpdateInfo":"","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-18
full_event_name: Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping
logging_binary_name: microsoftedgeupdate.exe
friendly_logging_binary_name: Microsoft Edge Update
payload:
  {"ver":"4.0","name":"Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.Ping","time":"2021-08-18T00:57:01.1881588Z","iKey":"P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425","ext":{"utc":{"eventFlags":258,"pgName":"ARIA","flags":1043333704,"epoch":"1107239","seq":71},"metadata":{"f":{"EventInfo.Level":4,"appChannel":4,"appConsentState":4,"appDayOfInstall":4,"appInstallTime":4,"appInstallTimeDiffSec":4,"appLastLaunchTime":4,"appPingEventAppSize":4,"appPingEventDoneBeforeOOBEComplete":4,"appPingEventDownloadMetricsCdnCID":4,"appPingEventDownloadMetricsDownloadTimeMs":4,"appPingEventDownloadMetricsDownloadedBytes":4,"appPingEventDownloadMetricsDownloader":4,"appPingEventDownloadMetricsError":4,"appPingEventDownloadMetricsTotalBytes":4,"appPingEventDownloadTimeMs":4,"appPingEventErrorCode":4,"appPingEventEventResult":4,"appPingEventEventType":4,"appPingEventExtraCode1":4,"appPingEventInstallTimeMs":4,"appPingEventNumBytesDownloaded":4,"appPingEventPackageCacheResult":4,"appPingEventSequenceId":4,"appPingEventSourceUrlIndex":4,"appPingEventUpdateCheckTimeMs":4,"appReferralHash":4,"hwDiskType":4,"hwLogicalCpus":4,"hwPhysmemory":4,"requestCheckPeriodSec":4},"privTags":2164262912},"app":{"name":"MicrosoftEdgeUpdate","id":"W:0006f9368d1ce8356b0711cefb486cce9e3d00000904!00009f76ef75fb7b0e7cbf90b96be9490600f4b34ad6!microsoftedgeupdate.exe","ver":"2021/02/19:05:54:24!43886!microsoftedgeupdate.exe","asId":168},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:EventInfo.Level;t:2","n:appChannel;t:2","n:appConsentState;t:2","n:appDayOfInstall;t:2","n:appInstallTime;t:2","n:appInstallTimeDiffSec;t:2","n:appLastLaunchTime;t:2","n:appPingEventAppSize;t:2","n:appPingEventDoneBeforeOOBEComplete;t:2","n:appPingEventDownloadMetricsCdnCID;t:2","n:appPingEventDownloadMetricsDownloadTimeMs;t:2","n:appPingEventDownloadMetricsDownloadedBytes;t:2","n:appPingEventDownloadMetricsDownloader;t:2","n:appPingEventDownloadMetricsError;t:2","n:appPingEventDownloadMetricsTotalBytes;t:2","n:appPingEventDownloadTimeMs;t:2","n:appPingEventErrorCode;t:2","n:appPingEventEventResult;t:2","n:appPingEventEventType;t:2","n:appPingEventExtraCode1;t:2","n:appPingEventInstallTimeMs;t:2","n:appPingEventNumBytesDownloaded;t:2","n:appPingEventPackageCacheResult;t:2","n:appPingEventSequenceId;t:2","n:appPingEventSourceUrlIndex;t:2","n:appPingEventUpdateCheckTimeMs;t:2","n:appReferralHash;t:2","n:appUpdateCheckIsUpdateDisabled;t:1","n:hwDiskType;t:2","n:hwHasAvx;t:1","n:hwHasSse;t:1","n:hwHasSse2;t:1","n:hwHasSse3;t:1","n:hwHasSse41;t:1","n:hwHasSse42;t:1","n:hwHasSsse3;t:1","n:hwLogicalCpus;t:2","n:hwPhysmemory;t:2","n:isMsftDomainJoined;t:1","n:requestCheckPeriodSec;t:2","n:requestDomainJoined;t:1","n:requestIsMachine;t:1"]},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"EventInfo.Level":1,"appAp":"","appAppId":"{8A69D345-D564-463c-AFF1-A69D9E530F96}","appBrandCode":"GGLS","appChannel":0,"appClientId":"","appCohort":"","appCohortHint":"","appCohortName":"","appConsentState":0,"appDayOfInstall":5341,"appExperiments":"","appInstallTime":1629199903,"appInstallTimeDiffSec":0,"appLang":"en","appLastLaunchTime":0,"appNextVersion":"92.0.4515.159","appPingEventAppSize":0,"appPingEventDoneBeforeOOBEComplete":-1,"appPingEventDownloadMetricsCdnCCC":"","appPingEventDownloadMetricsCdnCID":-1,"appPingEventDownloadMetricsDownloadTimeMs":0,"appPingEventDownloadMetricsDownloadedBytes":0,"appPingEventDownloadMetricsDownloader":0,"appPingEventDownloadMetricsError":0,"appPingEventDownloadMetricsServerIpHint":"","appPingEventDownloadMetricsTotalBytes":0,"appPingEventDownloadMetricsUrl":"","appPingEventDownloadTimeMs":0,"appPingEventErrorCode":0,"appPingEventEventResult":1,"appPingEventEventType":31,"appPingEventExtraCode1":1,"appPingEventInstallTimeMs":0,"appPingEventNumBytesDownloaded":0,"appPingEventPackageCacheResult":-1,"appPingEventSequenceId":1,"appPingEventSourceUrlIndex":-1,"appPingEventUpdateCheckTimeMs":0,"appReferralHash":0,"appUpdateCheckIsUpdateDisabled":0,"appUpdateCheckTargetVersionPrefix":"","appUpdateCheckTtToken":"","appVersion":"92.0.4515.159","eventType":"EVENT_INSTALL_EXTERNAL_APP_CHECK","expETag":"\"r452t1+k2Tgq/HXzjvFNBRhopBWR9sbjXxqeUDH9uX0=\"","hwDiskType":1,"hwHasAvx":1,"hwHasSse":1,"hwHasSse2":1,"hwHasSse3":1,"hwHasSse41":1,"hwHasSse42":1,"hwHasSsse3":1,"hwLogicalCpus":2,"hwPhysmemory":8,"isMsftDomainJoined":0,"oemProductManufacturer":"innotek GmbH","oemProductName":"VirtualBox","osArch":"x64","osPlatform":"win","osServicePack":"","osVersion":"10.0.19041.1165","requestCheckPeriodSec":-1,"requestDlpref":"","requestDomainJoined":0,"requestInstallSource":"scheduler","requestIsMachine":1,"requestOmahaShellVersion":"1.3.141.63","requestOmahaVersion":"1.3.151.27","requestProtocolVersion":"3.0","requestRequestId":"{A3B6190A-3FC8-4A98-8C5D-B1BF624D56AC}","requestSessionCorrelationVectorBase":"HdJqHLjvaEq10bfbaMBWhA","requestSessionId":"{1C6AD21D-EFB8-4A68-B5D1-B7DB68C05684}","requestTestSource":"","requestUid":"{EACF9470-B862-4BE2-A89D-B929B99FB7A6}"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.RunContext
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.RunContext","time":"2021-08-18T01:06:26.9349870Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":72},"metadata":{"f":{"Time":9},"privTags":16777216},"mscv":{"cV":"dLKWjsKqz0GI623T.1.0","cV":"dLKWjsKqz0GI623T.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"Time":"2021-08-18T01:06:26.9280000Z","PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","AppraiserVersion":"10019645","AppraiserBranch":"WinBuild","AppraiserProcess":"CompatTelRunner.exe","Context":"Telemetry","Subcontext":"N/A"}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T01:06:27.3609293Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-0B06-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":73},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"umb\\umbus","Order":0}],"COMPID":[],"STACKID":[{"Value":"\\driver\\umbus","Order":0},{"Value":"\\driver\\umbus","Order":1}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"umb","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"32","ParentId":"root\\umbus\\0000","Description":"UMBus Enumerator","BusReportedDescription":"","MatchingID":"umb\\umbus","Class":"system","ClassGuid":"{4d36e97d-e325-11ce-bfc1-08002be10318}","Manufacturer":"Microsoft","Model":"UMBus Enumerator","Inf":"umbus.inf","DriverName":"umbus.sys","DriverVerVersion":"10.0.19041.1","DriverVerDate":"06-21-2006","InstallDate":"08-17-2021","FirstInstallDate":"08-17-2021","Provider":"Microsoft","DriverPackageStrongName":"umbus.inf_amd64_b78a9c5b6fd62c27","DriverId":"0000e0b2521fdf09d6dd41b8f948565c908be9a7646e","Service":"umbus","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"umb\\umb\\1&841921d&0&terminput_bus","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T01:06:27.3926826Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-0B06-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":74},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"umb\\umbus","Order":0}],"COMPID":[],"STACKID":[{"Value":"\\driver\\umbus","Order":0},{"Value":"\\driver\\umbus","Order":1}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"umb","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"32","ParentId":"root\\umbus\\0000","Description":"UMBus Enumerator","BusReportedDescription":"","MatchingID":"umb\\umbus","Class":"system","ClassGuid":"{4d36e97d-e325-11ce-bfc1-08002be10318}","Manufacturer":"Microsoft","Model":"UMBus Enumerator","Inf":"umbus.inf","DriverName":"umbus.sys","DriverVerVersion":"10.0.19041.1","DriverVerDate":"06-21-2006","InstallDate":"08-17-2021","FirstInstallDate":"08-17-2021","Provider":"Microsoft","DriverPackageStrongName":"umbus.inf_amd64_b78a9c5b6fd62c27","DriverId":"0000e0b2521fdf09d6dd41b8f948565c908be9a7646e","Service":"umbus","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"umb\\umb\\1&841921d&0&ts_usb_hub_enumerator","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T01:06:27.4124293Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-0B06-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":75},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"umb\\umbus","Order":0}],"COMPID":[],"STACKID":[{"Value":"\\driver\\umbus","Order":0},{"Value":"\\driver\\umbus","Order":1}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"umb","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"32","ParentId":"root\\umbus\\0000","Description":"Remote Desktop Camera Bus","BusReportedDescription":"","MatchingID":"umb\\umbus","Class":"system","ClassGuid":"{4d36e97d-e325-11ce-bfc1-08002be10318}","Manufacturer":"Microsoft","Model":"UMBus Enumerator","Inf":"umbus.inf","DriverName":"umbus.sys","DriverVerVersion":"10.0.19041.1","DriverVerDate":"06-21-2006","InstallDate":"08-17-2021","FirstInstallDate":"08-17-2021","Provider":"Microsoft","DriverPackageStrongName":"umbus.inf_amd64_b78a9c5b6fd62c27","DriverId":"0000e0b2521fdf09d6dd41b8f948565c908be9a7646e","Service":"umbus","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"umb\\umb\\1&841921d&0&rdcamera_bus","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T01:06:27.4128836Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-0B06-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":76},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"umb\\umbus","Order":0}],"COMPID":[],"STACKID":[{"Value":"\\driver\\umbus","Order":0},{"Value":"\\driver\\umbus","Order":1}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"umb","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"32","ParentId":"root\\umbus\\0000","Description":"UMBus Enumerator","BusReportedDescription":"","MatchingID":"umb\\umbus","Class":"system","ClassGuid":"{4d36e97d-e325-11ce-bfc1-08002be10318}","Manufacturer":"Microsoft","Model":"UMBus Enumerator","Inf":"umbus.inf","DriverName":"umbus.sys","DriverVerVersion":"10.0.19041.1","DriverVerDate":"06-21-2006","InstallDate":"08-17-2021","FirstInstallDate":"08-17-2021","Provider":"Microsoft","DriverPackageStrongName":"umbus.inf_amd64_b78a9c5b6fd62c27","DriverId":"0000e0b2521fdf09d6dd41b8f948565c908be9a7646e","Service":"umbus","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"umb\\umb\\1&841921d&0&tsbus","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-18T01:06:27.4183449Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-0B06-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":77},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[{"Value":"umb\\ts_urb_hub","Order":0}],"COMPID":[],"STACKID":[{"Value":"\\driver\\tsusbhub","Order":0},{"Value":"\\driver\\umbus","Order":1}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"ts_usb_hub_enumerator","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"32","ParentId":"umb\\umb\\1&841921d&0&ts_usb_hub_enumerator","Description":"Remote Desktop USB Hub","BusReportedDescription":"","MatchingID":"umb\\ts_urb_hub","Class":"system","ClassGuid":"{4d36e97d-e325-11ce-bfc1-08002be10318}","Manufacturer":"(Standard system devices)","Model":"Remote Desktop USB Hub","Inf":"tsusbhub.inf","DriverName":"tsusbhub.sys","DriverVerVersion":"10.0.19041.1023","DriverVerDate":"06-21-2006","InstallDate":"08-17-2021","FirstInstallDate":"08-17-2021","Provider":"Microsoft","DriverPackageStrongName":"tsusbhub.inf_amd64_bd91a147ab4ebf1c","DriverId":"00004845d8d12909b9a317be7524cce43a7c2c6aed18","Service":"tsusbhub","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"ts_usb_hub_enumerator\\umb\\2&30d3618&0&ts_usb_hub","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd","time":"2021-08-18T01:06:27.4305924Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-0B06-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":78},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ModelName":"Microsoft Software Printer Driver","ModelId":"{b29d9289-6cd5-fa63-e747-7cdbe402ad72}","PrimaryCategory":"printfax.printer.virtual","Categories":"printfax.printer.virtual","IsConnected":"1","IsActive":"1","IsPaired":"0","IsNetworked":"0","IsMachineContainer":"0","FriendlyName":"","DiscoveryMethod":"","ModelNumber":"","Manufacturer":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDeviceContainer","objectInstanceId":"{ef98a587-5210-681d-a3cb-ab79af288581}","syncId":"{182566fd-b9fa-4b38-bc9c-c1dfe8a3573b}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd","time":"2021-08-18T01:06:27.4315694Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-0B06-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":79},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ModelName":"Microsoft Remote Display Adapter","ModelId":"{2a78354d-cc60-0e91-ef67-ec97d736534e}","PrimaryCategory":"unknown","Categories":"unknown","IsConnected":"0","IsActive":"1","IsPaired":"0","IsNetworked":"0","IsMachineContainer":"0","FriendlyName":"","DiscoveryMethod":"","ModelNumber":"","Manufacturer":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDeviceContainer","objectInstanceId":"{a88dbbb3-a68e-a52d-f959-4131baaab4cd}","syncId":"{182566fd-b9fa-4b38-bc9c-c1dfe8a3573b}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd","time":"2021-08-18T01:06:27.4335121Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-0B06-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":80},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ModelName":"Microsoft Software Printer Driver","ModelId":"{b29d9289-6cd5-fa63-e747-7cdbe402ad72}","PrimaryCategory":"printfax.printer.virtual","Categories":"printfax.printer.virtual","IsConnected":"1","IsActive":"1","IsPaired":"0","IsNetworked":"0","IsMachineContainer":"0","FriendlyName":"","DiscoveryMethod":"","ModelNumber":"","Manufacturer":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDeviceContainer","objectInstanceId":"{fca956d7-02e7-ff56-a989-5d0f9189f8fc}","syncId":"{182566fd-b9fa-4b38-bc9c-c1dfe8a3573b}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd","time":"2021-08-18T01:06:27.4364263Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"22280194-93CA-0000-0B06-2822CA93D701","eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":81},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ModelName":"Generic Non-PnP Monitor","ModelId":"{00b0927b-ab73-c599-59d5-8b32708d77c3}","PrimaryCategory":"display.monitor","Categories":"display.monitor","IsConnected":"0","IsActive":"1","IsPaired":"0","IsNetworked":"0","IsMachineContainer":"0","FriendlyName":"","DiscoveryMethod":"","ModelNumber":"","Manufacturer":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDeviceContainer","objectInstanceId":"{75851a1a-d05a-3b83-297c-d4fde4888825}","syncId":"{182566fd-b9fa-4b38-bc9c-c1dfe8a3573b}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove","time":"2021-08-18T01:06:27.4370064Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":82},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryDevicePnp","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session1mouse0","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove","time":"2021-08-18T01:06:27.4370686Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":83},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryDevicePnp","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session1keyboard0","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove","time":"2021-08-18T01:06:27.4371278Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":84},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryDevicePnp","objectInstanceId":"swd\\remotedisplayenum\\rdpidd_indirectdisplay&sessionid_0001","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove","time":"2021-08-18T01:06:27.4372604Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":85},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryDevicePnp","objectInstanceId":"swd\\mmdevapi\\{3.0.0.00000001}.{6c26ba7d-f0b2-4225-b422-8168c5261e45}","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpRemove","time":"2021-08-18T01:06:27.4375514Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":86},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryDevicePnp","objectInstanceId":"display\\default_monitor\\1&c528b8a&0&uid256","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDeviceContainerRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDeviceContainerRemove","time":"2021-08-18T01:06:27.4377256Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":87},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.1.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryDeviceContainer","objectInstanceId":"{8e6fa7eb-d5c5-971a-1180-8c5427695bea}","syncId":"{182566fd-b9fa-4b38-bc9c-c1dfe8a3573b}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:31.6928475Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":88},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"Microsoft.MicrosoftEdge.Stable","Publisher":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","Version":"92.0.902.73","Language":1033,"Source":"AppxPackage","Type":"Application","StoreAppType":"CentennialStoreApp","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"Microsoft.MicrosoftEdge.Stable_92.0.902.73_neutral__8wekyb3d8bbwe","RootDirPath":"%ProgramFiles%\\windowsapps\\microsoft.microsoftedge.stable_92.0.902.73_neutral__8wekyb3d8bbwe","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"0000c9b9d8b00d19124414b2fe53e1e0bb6400000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:31.8118001Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":89},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"Microsoft.WindowsFeedbackHub","Publisher":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","Version":"1.2106.1801.0","Language":1033,"Source":"AppxPackage","Type":"Application","StoreAppType":"Win10StoreApp","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"Microsoft.WindowsFeedbackHub_1.2106.1801.0_x64__8wekyb3d8bbwe","RootDirPath":"%ProgramFiles%\\windowsapps\\microsoft.windowsfeedbackhub_1.2106.1801.0_x64__8wekyb3d8bbwe","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"000085f29ee06e7c5cbdee3de3c917ccc62d00000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:32.0030145Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":90},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"Microsoft.Office.OneNote","Publisher":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","Version":"16001.14326.20018.0","Language":1033,"Source":"AppxPackage","Type":"Application","StoreAppType":"Win10StoreApp","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"Microsoft.Office.OneNote_16001.14326.20018.0_x64__8wekyb3d8bbwe","RootDirPath":"%ProgramFiles%\\windowsapps\\microsoft.office.onenote_16001.14326.20018.0_x64__8wekyb3d8bbwe","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"0000fdf2e28311452b1bd3e236d62281cced00000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:32.3017568Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":91},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"microsoft.windowscommunicationsapps","Publisher":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","Version":"16005.14326.20090.0","Language":1033,"Source":"AppxPackage","Type":"Application","StoreAppType":"Win10StoreApp","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"microsoft.windowscommunicationsapps_16005.14326.20090.0_x64__8wekyb3d8bbwe","RootDirPath":"%ProgramFiles%\\windowsapps\\microsoft.windowscommunicationsapps_16005.14326.20090.0_x64__8wekyb3d8bbwe","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"0000255f9b06205706c8bb39d514e12015d300000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:32.4228660Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":92},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"Microsoft.WindowsStore","Publisher":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","Version":"12107.1001.15.0","Language":1033,"Source":"AppxPackage","Type":"Application","StoreAppType":"Win10StoreApp","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe","RootDirPath":"%ProgramFiles%\\windowsapps\\microsoft.windowsstore_12107.1001.15.0_x64__8wekyb3d8bbwe","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"0000c1769ecc5812e65afd0b5d3e5f09353f00000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:32.7341219Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":93},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"Microsoft.SkypeApp","Publisher":"CN=Skype Software Sarl, O=Microsoft Corporation, L=Luxembourg, S=Luxembourg, C=LU","Version":"15.75.140.0","Language":1033,"Source":"AppxPackage","Type":"Application","StoreAppType":"CentennialStoreApp","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c","RootDirPath":"%ProgramFiles%\\windowsapps\\microsoft.skypeapp_15.75.140.0_x86__kzf8qxf38zg5c","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"0000b46e26cfa694b70f1d1a57b2ac02cae100000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:32.8333634Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":94},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"Microsoft.XboxIdentityProvider","Publisher":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","Version":"12.80.11001.0","Language":1033,"Source":"AppxPackage","Type":"Application","StoreAppType":"Win10StoreApp","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"Microsoft.XboxIdentityProvider_12.80.11001.0_x64__8wekyb3d8bbwe","RootDirPath":"%ProgramFiles%\\windowsapps\\microsoft.xboxidentityprovider_12.80.11001.0_x64__8wekyb3d8bbwe","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"0000b11e2bce6b3e77a8675e8b1274c93ce900000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:33.0963727Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":95},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"Microsoft.YourPhone","Publisher":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","Version":"1.21062.152.0","Language":1033,"Source":"AppxPackage","Type":"Application","StoreAppType":"CentennialStoreApp","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"Microsoft.YourPhone_1.21062.152.0_x64__8wekyb3d8bbwe","RootDirPath":"%ProgramFiles%\\windowsapps\\microsoft.yourphone_1.21062.152.0_x64__8wekyb3d8bbwe","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"00005fa80737a946fab467359d6a9e65414500000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:33.2279401Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":96},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"Microsoft.DiagnosticDataViewer","Publisher":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","Version":"4.2007.11582.0","Language":1033,"Source":"AppxPackage","Type":"Application","StoreAppType":"Win10StoreApp","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"Microsoft.DiagnosticDataViewer_4.2007.11582.0_x64__8wekyb3d8bbwe","RootDirPath":"%ProgramFiles%\\windowsapps\\microsoft.diagnosticdataviewer_4.2007.11582.0_x64__8wekyb3d8bbwe","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"000000012db3993c38aeca8ecf9ce8b868f700000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:33.3800454Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":97},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000c7325ad6ea4eb0b73e345f79dac671dbe33ce661","Name":"Google Chrome","Publisher":"Google LLC","Version":"92.0.4515.159","Language":65535,"Source":"AddRemoveProgram","Type":"Application","StoreAppType":"","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"","RootDirPath":"%ProgramFiles%\\google\\chrome\\application","InstallDate":"08/17/2021 00:00:00","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"00004bf56f025faab27c464b8efdfd90c8a60000ffff","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:33.5988788Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":98},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"00002c75d0e42df4bbce35baeb02d84358dbced69a13","Name":"Microsoft Edge","Publisher":"Microsoft Corporation","Version":"92.0.902.73","Language":65535,"Source":"AddRemoveProgram","Type":"Application","StoreAppType":"","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"","RootDirPath":"%ProgramFiles% (x86)\\microsoft\\edge\\application","InstallDate":"08/17/2021 00:00:00","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"0000a4a164c2eb7318cd3db378a54d6fec1d0000ffff","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-18T01:06:33.6038683Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":99},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"0000da39a3ee5e6b4b0d3255bfef95601890afd80709","Name":"Microsoft Edge Update","Publisher":"","Version":"1.3.151.27","Language":65535,"Source":"AddRemoveProgram","Type":"Application","StoreAppType":"","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"","RootDirPath":"","InstallDate":"08/18/2021 00:51:45","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"0000c6cf84d21a5b3f5b989b0874a193661e0000ffff","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5127406Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":100},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"0000fa6aadba353596d20c52442baa23897600000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5128272Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":101},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"0000f0bf27afc153a7e3f2ceded53c7a26f50000ffff","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5130362Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":102},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"0000b7c696220a5f1821f35008d5f8b7beed00000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5130733Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":103},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"0000b55c857a27ce7dc0fa9de5b82c66d2a00000ffff","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5131667Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":104},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"0000a008e19e50d6ef97c33593a27240f84400000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5132073Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":105},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"00009f68d0fe818461d3f475bb1b17e4597600000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5133167Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":106},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"00007c8abbf6ded5e0ee5747bb9440d23bdc00000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5133519Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":107},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"00007badeb2f1b9564e13e392dc6dfed743c0000ffff","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5134405Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":108},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"000069dc585962b67ba37d4e287187c9eb7d00000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5134954Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":109},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"0000559242e16e91420ab92fdd0273e11bf900000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationRemove
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationRemove","time":"2021-08-18T01:06:34.5135826Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":110},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":2,"objectType":"InventoryApplication","objectInstanceId":"000046f87b255a4a17620b9fa5a9700c1f0900000904","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:37.8277443Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":111},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"ts_usb_hub_enumerator\\umb\\2&30d3618&0&ts_usb_hub","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:37.8278236Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":112},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"ts_usb_hub_enumerator\\umb\\2&30d3618&0&ts_usb_hub","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:37.8292577Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":113},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"umb\\umb\\1&841921d&0&rdcamera_bus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:37.8292958Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":114},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"umb\\umb\\1&841921d&0&rdcamera_bus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:37.8293076Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":115},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"umb\\umb\\1&841921d&0&terminput_bus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-18T01:06:37.8293310Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":116},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"umb\\umb\\1&841921d&0&terminput_bus","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-18T01:06:38.0119071Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":117},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.5.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousMarkerCompatMarkers_21H1":"0"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-18T01:06:38.0128625Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":118},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.4.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousMarkerCompatMarkers_21H2":"0"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd","time":"2021-08-18T01:06:38.1724005Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":119},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.6.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"IndicatorValue":"132737223869289208","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUexIndicator","objectInstanceId":"GenTelRunTimestamp","syncId":"{02746298-2979-47AD-885C-6938EF9E3567}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd","time":"2021-08-18T01:06:38.1728630Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":120},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"IndicatorValue":"132737223869289208","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUexIndicator_21H1","objectInstanceId":"GenTelRunTimestamp","syncId":"{034AFCC6-3920-4467-9304-0C05E213B3D1}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-18T01:06:38.1739138Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":121},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.6.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousUexIndicator":"1"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-18T01:06:38.1750882Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":122},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.8.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousUexIndicator_21H1":"1"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd","time":"2021-08-18T01:06:38.1766433Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":123},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.7.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"IndicatorValue":"132737223869289208","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUexIndicator_21H2","objectInstanceId":"GenTelRunTimestamp","syncId":"{A8DF0E67-ACFE-4662-8CEE-227843E7CC51}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-18T01:06:38.1773507Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":124},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"dLKWjsKqz0GI623T.1.7.0"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousUexIndicator_21H2":"1"}}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-18T01:06:38.3197256Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":1043333704,"epoch":"1107239","seq":125},"metadata":{"privTags":2048},"mscv":{"cV":"dLKWjsKqz0GI623T.1.3"},"os":{"bootId":11,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000992aaab7a56c5447a2d5209d3135e1f9494a97d5!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":173},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"ts_usb_hub_enumerator\\umb\\2&30d3618&0&ts_usb_hub","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


