# events_persisted

sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:25:54.1329671Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":83},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Census.App
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.App","time":"2021-08-19T08:29:34.5668515Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":84},"metadata":{"f":{"CensusVersion":5,"AppraiserRunStartTimeStamp":5,"AppraiserRunEndTimeStamp":5,"AppraiserTaskExitCode":2,"AppraiserTaskLastRun":9},"privTags":2147483648},"mscv":{"cV":"jw+roU7jA06fDhhd.0","cV":"FGJY2APteEOwEOhz.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00009914f5914c02add1d3590844a628b3c5a5fa2c48!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"CensusVersion":100196451029,"AppraiserEnterpriseErrorCode":0,"AppraiserErrorCode":0,"AppraiserRunIsInProgressOrCrashed":4294967295,"AppraiserRunStartTimeStamp":132737223802573025,"AppraiserRunEndTimeStamp":132737224031947118,"AppraiserTaskEnabled":1,"AppraiserTaskExitCode":267009,"AppraiserTaskLastRun":"2021-08-19T18:29:31.0000000Z"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Census.Flighting
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.Flighting","time":"2021-08-19T08:29:35.0489708Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":85},"metadata":{"f":{"DeviceSampleRate":6},"privTags":2048},"mscv":{"cV":"jw+roU7jA06fDhhd.0","cV":"FGJY2APteEOwEOhz.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00009914f5914c02add1d3590844a628b3c5a5fa2c48!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"FlightIds":"FX:117B97D4,FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C3F9D5,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11D5BFCD,FX:11D898D7,FX:11DB147C,FX:11DE505A,FX:11DF5B12,FX:11E11E97,FX:11E3E2BA,FX:11E50151,FX:11E9EE98,FX:11F1992A,FX:11F4161E,FX:11F41B68,FX:11FB0F2F,FX:1201B330,FX:1202B7FC,FX:120BB68E,FX:121A20E1","MSA_Accounts":"","IsFlightsDisabled":0,"FlightingBranchName":"#","DeviceSampleRate":81.750270999999998,"SSRK":"#","DriverTargetRing":"#","EnablePreviewBuilds":4294967295}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.UsageStats
logging_binary_name: microsoftedgeupdate.exe
friendly_logging_binary_name: Microsoft Edge Update
payload:
  {"ver":"4.0","name":"Aria.af397ef28e484961ba48646a5d38cf54.Microsoft.WebBrowser.Installer.EdgeUpdate.UsageStats","time":"2021-08-19T08:29:35.2369049Z","iKey":"P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"ARIA","flags":471859784,"epoch":"1205429","seq":86},"metadata":{"f":{"EventInfo.Level":4,"measurementSecs":4},"privTags":2197817344},"app":{"name":"MicrosoftEdgeUpdate","id":"W:0006f9368d1ce8356b0711cefb486cce9e3d00000904!00009f76ef75fb7b0e7cbf90b96be9490600f4b34ad6!microsoftedgeupdate.exe","ver":"2021/02/19:05:54:24!43886!microsoftedgeupdate.exe","asId":223},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:EventInfo.Level;t:2","n:measurementSecs;t:2"]},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventInfo.Level":3,"measurementSecs":113907,"statsString":"goopdate_main:c=30&goopdate_constructor:c=30&core_worker_succeeded:c=1&core_worker_total:c=1&cdp_deferred_by_omaha_update:c=1&cdp_installer_pick_full:c=1&worker_self_updates_available:c=1&worker_update_check_succeeded:c=3&worker_update_check_total:c=3&worker_install_execute_total:c=1&worker_package_cache_put_succeeded:c=1&worker_package_cache_put_total:c=1&worker_download_succeeded:c=1&worker_download_total:c=1&setup_install_service_and_task_succeeded:c=1&setup_install_task_succeeded:c=1&setup_install_service_succeeded:c=1&setup_install_service_task_total:c=1&setup_files_verification_succeeded:c=1&setup_files_total:c=1&setup_subsequent_install_should_install_true:c=1&setup_subsequent_install_total:c=1&setup_should_install_true_newer:c=1&setup_should_install_total:c=1&setup_do_self_install_succeeded:c=1&setup_do_self_install_total:c=1&setup_update_self_succeeded:c=1&setup_update_self_total:c=1&client_another_update_in_progress:c=1&client_update_apps_duration_ms:t=13;7254;0;41218&updatecheck_succeeded_ms:t=3;3394;2138;5243&setup_process_wait_ms:t=1;891;891;891&setup_lock_acquire_ms:t=1;0;0;0&setup_install_task_ms:t=1;36;36;36&setup_install_service_ms:t=1;68;68;68&setup_phase2_ms:t=1;764;764;764&setup_files_ms:t=1;147;147;147&setup_install_google_update_total_ms:t=1;1812;1812;1812&omaha_version:i=281487871508507&windows_major_version:i=10&last_started_au:i=1629284205&core_run_scheduled_task_exit_code:i=267009&worker_self_update_response_time_since_first_ms:i=3473&worker_self_update_responses:i=1&worker_shell_version:i=281487870853183&last_checked:i=1629284246&is_system_install:b=t&core_system_enlightened:b=t&worker_is_windows_installing:b=f"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:29:35.8397110Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":87},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"IsWUfBFederatedScanDisabled":2,"ActivityMatchingId":8}},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0.1.1.0.0.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"00000000-0000-0000-0000-000000000000","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","ProcessName":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"IsWUfBFederatedScanDisabled":-1,"ClientVersion":"10.0.19041.1151","ActivityMatchingId":"BDD0C154-D251-4845-A45A-C4803A425C0B"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Census.Speech
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.Speech","time":"2021-08-19T08:29:36.6171111Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":88},"metadata":{"f":{"RemotelyManaged":2,"GPAllowInputPersonalization":2,"MDMAllowInputPersonalization":2,"KeyVer":2,"SpeechServicesValueSource":2},"privTags":2048},"mscv":{"cV":"jw+roU7jA06fDhhd.0","cV":"FGJY2APteEOwEOhz.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00009914f5914c02add1d3590844a628b3c5a5fa2c48!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"KWSEnabled":"DSMAUser:[]LastLoggedOnUser:[(0,1)]DeviceUsers:[(0,1)]","SpeakerIdEnabled":"DSMAUser:[]LastLoggedOnUser:[(2,1)]DeviceUsers:[(2,1)]","AboveLockEnabled":"DSMAUser:[]LastLoggedOnUser:[(0,1)]DeviceUsers:[(0,1)]","HolographicSpeechInputDisabled":"DSMAUser:[]LastLoggedOnUser:[(1,1)]DeviceUsers:[(1,1)]","HolographicSpeechInputDisabledRemote":"DSMAUser:[]LastLoggedOnUser:[(2,1)]DeviceUsers:[(2,1)]","SpeechServicesEnabled":"DSMAUser:[]LastLoggedOnUser:[(1,1)]DeviceUsers:[(1,1)]","RemotelyManaged":100,"GPAllowInputPersonalization":1,"MDMAllowInputPersonalization":100,"KeyVer":2,"SpeechServicesValueSource":3}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:29:37.1889158Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":89},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"IsWUfBFederatedScanDisabled":2,"ActivityMatchingId":8}},"mscv":{"cV":"hrzHOhU090ib9QEk.0.1.0.0.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"00000000-0000-0000-0000-000000000000","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"IsWUfBFederatedScanDisabled":-1,"ClientVersion":"10.0.19041.1151","ActivityMatchingId":"85C9F51B-89A5-46EE-9801-EC11FF5DE34D"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:29:37.1997688Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":90},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"IsWUfBFederatedScanDisabled":2,"ActivityMatchingId":8}},"mscv":{"cV":"hrzHOhU090ib9QEk.0.1.1.0.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"00000000-0000-0000-0000-000000000000","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"8B24B027-1DEE-BABB-9A95-3517DFB9C552","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"IsWUfBFederatedScanDisabled":-1,"ClientVersion":"10.0.19041.1151","ActivityMatchingId":"3339EE9F-129A-4EEC-94C0-0FB95C83ED75"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Census.WU
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.WU","time":"2021-08-19T08:29:37.8127552Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":91},"metadata":{"f":{"WUDeferUpgradePeriod":2,"WUDeferUpdatePeriod":2},"privTags":2147485696},"mscv":{"cV":"jw+roU7jA06fDhhd.0","cV":"FGJY2APteEOwEOhz.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00009914f5914c02add1d3590844a628b3c5a5fa2c48!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"WUMachineId":"7f714633-1982-493b-a17a-0fe37eb19292","WUServer":"#","WUDODownloadMode":1,"OSWUAutoUpdateOptions":4,"OSWUAutoUpdateOptionsSource":"Default","AppStoreAutoUpdate":4294967295,"AppStoreAutoUpdatePolicy":4294967295,"AppStoreAutoUpdateMDM":2,"DelayUpgrade":"False","UpdateServiceURLConfigured":"0","WUDeferUpgradePeriod":-1,"WUDeferUpdatePeriod":-1,"WUPauseState":"#","OSUninstalled":false,"OSRolledBack":false,"OSRollbackCount":4294967295,"UninstallActive":4294967295,"AppraiserGatedStatus":"2","OSAssessmentForFeatureUpdate":0,"OSAssessmentForQualityUpdate":0,"OSAssessmentForSecurityUpdate":0,"OSAssessmentFeatureOutOfDate":0,"OSAssessmentQualityOutOfDate":0,"OSAssessmentReleaseInfoTime":"2021-08-12T18:02:00.169"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.General.InventoryMiscellaneousUUPInfoAdd","time":"2021-08-19T08:29:37.8232839Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":92},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"ilVjvHa7F060Qq3m.0","cV":"FGJY2APteEOwEOhz.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00009914f5914c02add1d3590844a628b3c5a5fa2c48!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":207},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Identifier":"DefenderSignature.amd64","Version":"1.345.722.0","Source":"","PreviousVersion":"","LastActivatedVersion":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUUPInfo","objectInstanceId":"DefenderSignature.amd64","syncId":"{55f6d153-9edb-4664-b692-00e5d25934f5}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066087Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":93},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:117B97D4","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066114Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":94},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:117B9872","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066124Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":95},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:119E26AD","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066134Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":96},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C0E96C","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066143Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":97},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C3F9D5","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066152Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":98},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C7EB6A","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066161Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":99},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C9408A","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066169Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":100},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11C940DB","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066178Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":101},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11CB9A9F","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066187Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":102},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11CB9AC1","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066195Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":103},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11D5BFCD","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066204Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":104},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11D898D7","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066214Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":105},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11DB147C","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066223Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":106},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11DE505A","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066235Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":107},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11DF5B12","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066245Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":108},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11E11E97","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066254Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":109},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11E3E2BA","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066263Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":110},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11E50151","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066272Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":111},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11E9EE98","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066281Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":112},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11F1992A","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066290Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":113},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11F4161E","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066299Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":114},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11F41B68","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066308Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":115},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:11FB0F2F","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066317Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":116},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:1201B330","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066326Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":117},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:1202B7FC","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066341Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":118},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:120BB68E","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066350Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":119},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:121A20E1","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5066360Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":120},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:121BF15F","state":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.FeatureExperimentStateChange","time":"2021-08-19T08:29:39.5590629Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":121},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"flightId":"FX:121BF15F","state":2}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.FeatureExperiment.AggregatedStagingState
logging_binary_name: taskhostw.exe
friendly_logging_binary_name: Host Process for Windows Tasks
payload:
  {"ver":"4.0","name":"Microsoft.Windows.FeatureExperiment.AggregatedStagingState","time":"2021-08-19T08:29:39.7640053Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":122},"metadata":{"privTags":2147483648},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fed4b4a753a9541389aa670c69e624be07569ccd!taskhostw.exe","ver":"2081/06/21:11:10:49!2296E!taskhostw.exe","asId":205},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Features":[{"featureId":18299130,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:117B97D4"},{"featureId":18973123,"hasTrigger":true,"state":2,"variant":1,"payload":177209344,"stateKind":4,"flightId":"FX:11C0E96C"},{"featureId":19638787,"hasTrigger":true,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:117B9872"},{"featureId":21969097,"hasTrigger":true,"state":2,"variant":1,"payload":33377331,"stateKind":4,"flightId":"FX:119E26AD"},{"featureId":23057458,"hasTrigger":false,"state":2,"variant":1,"payload":100663311,"stateKind":4,"flightId":"FX:11D5BFCD"},{"featureId":23531064,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11DF5B12"},{"featureId":24706693,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F41B68"},{"featureId":25330851,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DE505A"},{"featureId":27485177,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F1992A"},{"featureId":27919905,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C7EB6A"},{"featureId":28034939,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E50151"},{"featureId":28083526,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11DB147C"},{"featureId":28170999,"hasTrigger":false,"state":2,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C9408A"},{"featureId":28240882,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E11E97"},{"featureId":28260762,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11C3F9D5"},{"featureId":28361144,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11D898D7"},{"featureId":28585361,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11FB0F2F"},{"featureId":28622680,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11CB9A9F"},{"featureId":28622690,"hasTrigger":true,"state":2,"variant":3,"payload":0,"stateKind":4,"flightId":"FX:11C940DB"},{"featureId":28758888,"hasTrigger":true,"state":2,"variant":2,"payload":0,"stateKind":4,"flightId":"FX:11CB9AC1"},{"featureId":29815990,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11F4161E"},{"featureId":29932051,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E9EE98"},{"featureId":29984114,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:11E3E2BA"},{"featureId":32249103,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1201B330"},{"featureId":32315643,"hasTrigger":false,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:1202B7FC"},{"featureId":32328375,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:120BB68E"},{"featureId":33454547,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:121BF15F"},{"featureId":33588494,"hasTrigger":true,"state":1,"variant":0,"payload":0,"stateKind":4,"flightId":"FX:121A20E1"}]}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OneDrive.Sync.Updater.CommonDataV2
logging_binary_name: onedrivestandaloneupdater.exe
friendly_logging_binary_name: Standalone Updater
payload:
  {"ver":"4.0","name":"Microsoft.OneDrive.Sync.Updater.CommonDataV2","time":"2021-08-19T08:29:41.2157130Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":123},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0006f0bf27afc153a7e3f2ceded53c7a26f500000904!0000f782729d96f2c071167b77eed789036e0368ec12!onedrivestandaloneupdater.exe","ver":"2073/07/28:20:57:21!2B7A22!onedrivestandaloneupdater.exe","asId":218},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppVersion":"21.139.0711.0001","OfficeVersion":"","OSArch":"AMD64","BuildArch":"x86","Market":"en-US","OneDriveDeviceId":"20865b8d-f377-16d7-6725-8afe866c8528","MachineGuid":"5A2CD9B2-5E46-4396-99A8-5C79DF95E368","UserGuid":"784F0A70-E807-4F90-B46C-2DA0125D9E1B","IsMSFTInternal":"0","OSDeviceName":"*****","OSUserName":"*****","IsTestMachine":"false","Environment":"Prod","UpdateRing":"Prod","AccountType":"StandaloneUpdater","UpdateGroupId":"100","FeatureSet":"|"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:29:41.7272956Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-172D-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":124},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":9,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":877770,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":20085}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:29:41.7273054Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-172D-3105D394D701","eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":125},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":6,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":877770,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:29:41.7273156Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-1E2D-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":126},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":10,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":33006,"GPUDeviceID":48879,"SubVendorID":5549,"SubSystemID":1029,"GPURevisionID":0,"DriverVersion":"10.0.19041.868","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16457734,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":true,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":10,"IsRemovable":false,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":19906,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":1,"NumVidPnTargets":1,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_65ab9a260dbf7467\\BasicDisplay.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794020353,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:29:41.7273185Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-1E2D-3105D394D701","eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":127},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":7,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#4&17f0ff54&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":0,"DisplayAdapterLuid":19906,"AdapterInterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OneDrive.Sync.Updater.UpdateXmlDownloadHResultV2
logging_binary_name: onedrivestandaloneupdater.exe
friendly_logging_binary_name: Standalone Updater
payload:
  {"ver":"4.0","name":"Microsoft.OneDrive.Sync.Updater.UpdateXmlDownloadHResultV2","time":"2021-08-19T08:29:41.7426056Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":128},"metadata":{"f":{"hr":2}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0006f0bf27afc153a7e3f2ceded53c7a26f500000904!0000f782729d96f2c071167b77eed789036e0368ec12!onedrivestandaloneupdater.exe","ver":"2073/07/28:20:57:21!2B7A22!onedrivestandaloneupdater.exe","asId":218},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hr":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OneDrive.Sync.Updater.UpdateOverallResult
logging_binary_name: onedrivestandaloneupdater.exe
friendly_logging_binary_name: Standalone Updater
payload:
  {"ver":"4.0","name":"Microsoft.OneDrive.Sync.Updater.UpdateOverallResult","time":"2021-08-19T08:29:42.5615076Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":129},"metadata":{"f":{"hr":2}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0006f0bf27afc153a7e3f2ceded53c7a26f500000904!0000f782729d96f2c071167b77eed789036e0368ec12!onedrivestandaloneupdater.exe","ver":"2073/07/28:20:57:21!2B7A22!onedrivestandaloneupdater.exe","asId":218},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"UpdaterVersion":"21.139.0711.0001","IsLoggingEnabled":1,"hr":-2147160572}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:29:42.8530460Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-642D-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":130},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":11,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":877770,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":20085}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:29:42.8530552Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-642D-3105D394D701","eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":131},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":8,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":877770,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:29:42.8530652Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-6B2D-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":132},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":12,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":33006,"GPUDeviceID":48879,"SubVendorID":5549,"SubSystemID":1029,"GPURevisionID":0,"DriverVersion":"10.0.19041.868","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16457734,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":true,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":10,"IsRemovable":false,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":19906,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":1,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":1,"NumVidPnTargets":1,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\DriverStore\\FileRepository\\basicdisplay.inf_amd64_65ab9a260dbf7467\\BasicDisplay.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794020353,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: svchost_?dxgkrnl.sys?
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:29:42.8530687Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-6B2D-3105D394D701","eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":133},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":9,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":2,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#4&17f0ff54&0&UID0#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":0,"DisplayAdapterLuid":19906,"AdapterInterfaceId":"\\??\\PCI#VEN_80EE&DEV_BEEF&SUBSYS_040515AD&REV_00#3&267a616a&0&10#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.AppXDeploymentServer.PackageManagerUninstall
logging_binary_name: svchost_?AppXDeploymentServer.dll?
friendly_logging_binary_name: AppX Deployment Server DLL
payload:
  {"ver":"4.0","name":"Microsoft.Windows.AppXDeploymentServer.PackageManagerUninstall","time":"2021-08-19T08:29:46.5708411Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-D22D-3105D394D701","eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":134},"metadata":{"f":{"TargetPlatform":2,"PackageType":2,"ErrorCode":2,"DeploymentOptions":5}},"mscv":{"cV":""},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":81},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"DeploymentOperation":5,"PackageFullName":"Microsoft.XboxGamingOverlay_5.721.6282.0_neutral_~_8wekyb3d8bbwe","Path":" ","MountPoint":"C:","TargetPlatform":1,"SystemVolume":true,"StorageId":"\\\\?\\Volume{82f57998-0000-0000-0000-300300000000}","HasCentennial":false,"HasWin32alacarte":false,"HasFullTrust":false,"PackageType":0,"IsPackageEncrypted":false,"UninstallSuccess":true,"ErrorCode":0,"CallingProcess":"svchost.exe,wuauserv","DeploymentOptions":0,"PackageOrigin":0,"IsStubApp":false,"HasExternalLocation":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.UpdateDetected
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.UpdateDetected","time":"2021-08-19T08:29:46.8098331Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-D22D-3105D394D701","eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":135},"metadata":{"f":{"NumberOfApplicableUpdates":2,"ServiceGuid":8}},"mscv":{"cV":"hrzHOhU090ib9QEk.0.1.0.0.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","NumberOfApplicableUpdates":18,"ApplicableUpdateInfo":"Id:581A5C12-37FE-40EA-87D9-54D861803F30|Rev:200|EventType:1|State:2|Context:0|Deployment:49684278|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:6087A019-0FB8-48F9-9029-C7B694FA5F09|Rev:200|EventType:1|State:3|Context:0|Deployment:49327400|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:5F0FB519-AC98-4EFD-8C42-072778C9B26D|Rev:200|EventType:1|State:3|Context:0|Deployment:49327395|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:B2F49E2B-5631-4FD8-B2AF-1B2F9F340192|Rev:200|EventType:1|State:3|Context:0|Deployment:49327382|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7|Rev:200|EventType:2|State:2|Context:0|Deployment:49686243;Id:F98C5046-357E-4D19-87D2-5B3186F61383|Rev:200|EventType:1|State:2|Context:0|Deployment:49684320|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:635A5847-143E-47CA-8E1C-D65C758543AF|Rev:200|EventType:1|State:3|Context:0|Deployment:49327435|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:F2260251-4F44-4306-A736-AF11FEEF7E7B|Rev:200|EventType:1|State:2|Context:0|Deployment:49686246|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:E2E08B52-7625-4C9A-B04F-54C56F8649F2|Rev:200|EventType:1|State:3|Context:0|Deployment:49327402|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:8D258654-164B-4DA5-BCE0-B989F1A6ABA6|Rev:200|EventType:1|State:2|Context:0|Deployment:49684310|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:333E8057-3508-4241-B2D7-7785900F862D|Rev:200|EventType:1|State:3|Context:0|Deployment:49327397|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:42B2A670-CC26-4A20-BD6D-015268445719|Rev:200|EventType:1|State:3|Context:0|Deployment:49327387|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:9CEEB177-5311-4C28-A0A8-BB23BDA1835E|Rev:200|EventType:1|State:2|Context:0|Deployment:49684284|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:36CC7382-5A7A-49B4-9E60-AB7595C7B078|Rev:200|EventType:1|State:3|Context:0|Deployment:49327392|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:AE2F6AB2-C36A-446B-8FBE-BF55CD367F60|Rev:200|EventType:1|State:3|Context:0|Deployment:49327437|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:C6405ADB-1D6A-4119-AB09-7E1F3FDBF49F|Rev:200|EventType:1|State:3|Context:0|Deployment:49327380|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:C1C178F3-AD00-4AE2-AD49-D8D5BB6B0D57|Rev:200|EventType:1|State:3|Context:0|Deployment:49327390|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7;Id:F04760FD-E3E5-4CE6-BF37-C24F54510852|Rev:200|EventType:1|State:3|Context:0|Deployment:49327385|BundleIds:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","IntentPFNs":"","RelatedCV":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:29:46.8105004Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-D22D-3105D394D701","eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":136},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.0.1.0.0.4.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"C1A3E69A-7358-4309-9FC7-7BE132F6F07B","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"85C9F51B-89A5-46EE-9801-EC11FF5DE34D","SyncType":2,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":0,"ScanDurationInSeconds":9,"ScanEnqueueTime":0,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":968,"NumberOfNewUpdatesFromServiceSync":171,"ServiceUrl":"https://fe2cr.update.microsoft.com/v6/ClientWebService/client.asmx","Online":true,"AllowCachedResults":false,"MetadataIntegrityMode":3,"TotalNumMetadataSignatures":199,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":0,"ScanProps":0,"NumberOfApplicableUpdates":1,"ApplicableUpdateInfo":"Id:51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7|Rev:200|EventType:2|State:2|Context:0|Deployment:49686243","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:29:50.5791815Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":137},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.0.1.1.0.3.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"83E7EF30-1EB2-4581-8415-2C18AA1B8590","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"8B24B027-1DEE-BABB-9A95-3517DFB9C552","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"3339EE9F-129A-4EEC-94C0-0FB95C83ED75","SyncType":2,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":0,"ScanDurationInSeconds":13,"ScanEnqueueTime":9,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":74,"NumberOfNewUpdatesFromServiceSync":0,"ServiceUrl":"https://fe3cr.delivery.mp.microsoft.com/ClientWebService/client.asmx","Online":true,"AllowCachedResults":false,"MetadataIntegrityMode":3,"TotalNumMetadataSignatures":0,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":1,"ScanProps":0,"NumberOfApplicableUpdates":0,"ApplicableUpdateInfo":"","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.UpdateDetected
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.UpdateDetected","time":"2021-08-19T08:29:51.2173847Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":138},"metadata":{"f":{"NumberOfApplicableUpdates":2,"ServiceGuid":8}},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0.1.1.0.0.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","NumberOfApplicableUpdates":12,"ApplicableUpdateInfo":"Id:0EB6311B-B7BE-47AA-8EF3-C96715D4AB5E|Rev:1|EventType:1|State:3|Context:0|Deployment:301304133|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:27F6E21D-4A78-49DF-A2D2-8465DA62B94D|Rev:1|EventType:1|State:3|Context:0|Deployment:301304134|PackageFullName:Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:EE956249-26DB-4E73-94BC-5C13DAE224D7|Rev:1|EventType:1|State:3|Context:0|Deployment:301304137|PackageFullName:Microsoft.UI.Xaml.2.4_2.42007.9001.0_x86__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:96023C57-E8D6-42DD-814A-141237A139BF|Rev:1|EventType:1|State:3|Context:0|Deployment:329077774|PackageFullName:Microsoft.VCLibs.140.00_14.0.30035.0_x64__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:46F09E60-E8F9-4B4C-B46D-ECFB8E398F73|Rev:1|EventType:1|State:3|Context:0|Deployment:329079803|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:1297E261-145A-4484-88EE-D8C7B8AB24A6|Rev:1|EventType:1|State:3|Context:0|Deployment:329079804|PackageFullName:Microsoft.VCLibs.140.00.UWPDesktop_14.0.30035.0_x86__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:92BC7769-B1AE-48F6-AC42-373C30BB0BA6|Rev:1|EventType:1|State:3|Context:0|Deployment:329077773|PackageFullName:Microsoft.VCLibs.140.00_14.0.30035.0_x86__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:5281006D-EFBC-4298-86C3-810E696A38E8|Rev:1|EventType:1|State:2|Context:0|Deployment:333151936|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:75CA6E94-40AC-4530-A533-27D6FFF94E66|Rev:1|EventType:1|State:3|Context:0|Deployment:329077771|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:8E4E85A5-6BC6-4306-8F39-01C478241ED4|Rev:1|EventType:1|State:2|Context:0|Deployment:333151937|PackageFullName:Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:A3F3FBAE-190D-4D01-8AD9-3E9FCAB27821|Rev:1|EventType:1|State:3|Context:0|Deployment:329079807|PackageFullName:Microsoft.VCLibs.140.00.UWPDesktop_14.0.30035.0_x64__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:F7C06CB9-CD68-4876-A951-1E2D1943B1A3|Rev:1|EventType:2|State:2|Context:0|Deployment:333151941","IntentPFNs":"","RelatedCV":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:29:51.2183014Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":139},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0.1.1.0.0.4.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"98558F53-1AFD-4A7D-8746-7AEC17D00180","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","ProcessName":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"BDD0C154-D251-4845-A45A-C4803A425C0B","SyncType":4,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":39,"ScanDurationInSeconds":15,"ScanEnqueueTime":0,"NumberOfLoop":1,"NumberOfUpdatesEvaluated":710,"NumberOfNewUpdatesFromServiceSync":9,"ServiceUrl":"https://fe3cr.delivery.mp.microsoft.com/ClientWebService/client.asmx","Online":true,"AllowCachedResults":false,"MetadataIntegrityMode":3,"TotalNumMetadataSignatures":27,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":0,"ScanProps":0,"NumberOfApplicableUpdates":1,"ApplicableUpdateInfo":"Id:F7C06CB9-CD68-4876-A951-1E2D1943B1A3|Rev:1|EventType:2|State:2|Context:0|Deployment:333151941","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.RunContext
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.RunContext","time":"2021-08-19T08:29:53.3737939Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":140},"metadata":{"f":{"Time":9},"privTags":16777216},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.0","cV":"FkXWFCvzFU2ytKrx.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Time":"2021-08-19T08:29:53.3410000Z","PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","AppraiserVersion":"10019645","AppraiserBranch":"WinBuild","AppraiserProcess":"CompatTelRunner.exe","Context":"Telemetry","Subcontext":"N/A"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:29:53.6294736Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":141},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.5.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"761FC97D-3754-49E2-AEEC-34A9F2CF891E","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":1,"UpdateId":"9CEEB177-5311-4C28-A0A8-BB23BDA1835E","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:29:53.6301049Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":142},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.5.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"5772B847-F5C3-43C2-92E2-82E3944F926F","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":2,"UpdateId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","RevisionNumber":200,"BundleId":"00000000-0000-0000-0000-000000000000","BundleRevisionNumber":0,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:29:54.1565614Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":143},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.3.2.4"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"","doClientVersion":"10.0.19041.746","jobID":"264682A1-97F7-4FE3-985F-F041A834F58C","sessionID":"23745A6F-72A0-41BB-A6BF-12462C8401F0","predefinedCallerName":"DOContentPolicy","updateID":"{9CEEB177-5311-4C28-A0A8-BB23BDA1835E}","costFlags":0,"fileID":"842b257c27954cb370131b2bb3e38de3ca7a40cb_IkhUDPfkGIsQ6vkkpjG9cDDBNxvdpMnrKxk2rVvvFv0=__0_PHF","fileSize":0,"fileSizeCaller":0,"bytesRequested":0,"cdnUrl":"http://emdl.ws.microsoft.com/emdl/c/doc/ph/prod5/msdownload/update/software/defu/2021/08/1024/am_engine_patch_1.1.18400.4_842b257c27954cb370131b2bb3e38de3ca7a40cb.exe.json","routeToCacheServer":"","filePath":"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Microsoft\\Windows\\DeliveryOptimization\\Cache\\afb95459df9254c5c4656aed3bd43800a3606528\\content.phf","groupID":"","background":true,"downloadMode":0,"downloadModeSrc":99,"downloadModeReason":-2147023728,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"{\"TraceLevel\":{\"v\":\"4\",\"p\":\"99\"},\"CountryCode\":{\"v\":\"AU\",\"p\":\"1\"},\"KeyValue_EndpointFullUri\":{\"v\":\"kv801.prod.do.dsp.mp.microsoft.com\",\"p\":\"1\"},\"ClusterCount\":{\"v\":\"5\",\"p\":\"0\"}}","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:29:54.2068085Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":144},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.9.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"3401C0E1-F20C-43F0-BBB5-6A18FFC9A31E","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":1,"UpdateId":"F98C5046-357E-4D19-87D2-5B3186F61383","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:29:54.3395780Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":145},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.13.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"05739BBD-461A-452B-A319-A0B1FF912332","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":1,"UpdateId":"F2260251-4F44-4306-A736-AF11FEEF7E7B","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-19T08:29:54.4616551Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-C42F-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":146},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.2.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[],"COMPID":[{"Value":"swd\\genericraw","Order":0},{"Value":"swd\\generic","Order":1}],"STACKID":[{"Value":"\\driver\\softwaredevice","Order":0}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"swd","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"96","ParentId":"htree\\root\\0","Description":"***","BusReportedDescription":"Smart Card Device Enumeration Bus","MatchingID":"swd\\genericraw","Class":"softwaredevice","ClassGuid":"{62f9c741-b25a-46ce-b54c-9bccce08b6f2}","Manufacturer":"Microsoft","Model":"Generic software device","Inf":"c_swdevice.inf","DriverName":"","DriverVerVersion":"10.0.19041.1","DriverVerDate":"06-21-2006","InstallDate":"08-17-2021","FirstInstallDate":"08-17-2021","Provider":"Microsoft","DriverPackageStrongName":"c_swdevice.inf_amd64_12050f4158021fcb","DriverId":"","Service":"","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"swd\\scdeviceenumbus\\0","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDevicePnpAdd","time":"2021-08-19T08:29:54.4624062Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-C42F-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":147},"metadata":{"f":{"DeviceInterfaceClasses":{"a":8},"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.2.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","HWID":[],"COMPID":[{"Value":"swd\\genericraw","Order":0},{"Value":"swd\\generic","Order":1}],"STACKID":[{"Value":"\\driver\\softwaredevice","Order":0}],"ExtendedInfs":[],"ProblemCode":"0","InstallState":"0","Enumerator":"swd","ContainerId":"{27db0821-3bf9-f71a-f96f-a53403857690}","DeviceState":"96","ParentId":"htree\\root\\0","Description":"***","BusReportedDescription":"Microsoft Passport Container Enumeration Bus","MatchingID":"swd\\genericraw","Class":"softwaredevice","ClassGuid":"{62f9c741-b25a-46ce-b54c-9bccce08b6f2}","Manufacturer":"Microsoft","Model":"Generic software device","Inf":"c_swdevice.inf","DriverName":"","DriverVerVersion":"10.0.19041.1","DriverVerDate":"06-21-2006","InstallDate":"08-17-2021","FirstInstallDate":"08-17-2021","Provider":"Microsoft","DriverPackageStrongName":"c_swdevice.inf_amd64_12050f4158021fcb","DriverId":"","Service":"","LowerClassFilters":"","LowerFilters":"","UpperClassFilters":"","UpperFilters":"","DeviceInterfaceClasses":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDevicePnp","objectInstanceId":"swd\\scdeviceenumbus\\1","syncId":"{279163ef-e4a3-4e8a-bfce-541fa1b253ab}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd","time":"2021-08-19T08:29:54.4823830Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-C42F-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":148},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.2.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ModelName":"Microsoft Remote Display Adapter","ModelId":"{2a78354d-cc60-0e91-ef67-ec97d736534e}","PrimaryCategory":"unknown","Categories":"unknown","IsConnected":"0","IsActive":"1","IsPaired":"0","IsNetworked":"0","IsMachineContainer":"0","FriendlyName":"","DiscoveryMethod":"","ModelNumber":"","Manufacturer":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDeviceContainer","objectInstanceId":"{9b17c557-6414-adf2-fd2b-b66c208eaecf}","syncId":"{182566fd-b9fa-4b38-bc9c-c1dfe8a3573b}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:29:54.5270920Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":149},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.3.2.5"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"23745A6F-72A0-41BB-A6BF-12462C8401F0","predefinedCallerName":"DOContentPolicy","updateID":"{9CEEB177-5311-4C28-A0A8-BB23BDA1835E}","jobID":"264682A1-97F7-4FE3-985F-F041A834F58C","fileID":"842b257c27954cb370131b2bb3e38de3ca7a40cb_IkhUDPfkGIsQ6vkkpjG9cDDBNxvdpMnrKxk2rVvvFv0=__0_PHF","bytesRequested":314,"fileSize":314,"bytesFromCDN":314,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":0,"dataSourcesTotal":"","cdnUrl":"http://emdl.ws.microsoft.com/emdl/c/doc/ph/prod5/msdownload/update/software/defu/2021/08/1024/am_engine_patch_1.1.18400.4_842b257c27954cb370131b2bb3e38de3ca7a40cb.exe.json","cdnIp":"[123.253.149.67]:80;X-CCC:AU;X-CID:2;","routeToCacheServer":"","numPeers":0,"numPeersLocal":0,"expiresAt":"1970-01-01T00:00:00.0000000Z","cdnConnectionCount":0,"cacheServerConnectionCount":0,"lanConnectionCount":0,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":0,"uplinkBps":0,"downlinkUsageBps":0,"uplinkUsageBps":0,"totalTimeMs":370,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":0,"downloadModeSrc":99,"downloadModeReason":0,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:29:54.5285312Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":150},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.3.1.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"f339ab7f28d0aa48aa4a2c7823f324b300000000","doClientVersion":"10.0.19041.746","jobID":"264682A1-97F7-4FE3-985F-F041A834F58C","sessionID":"873C0941-4B3F-4AD6-BFCE-1ABA8BA312AD","predefinedCallerName":"WU Client Download","updateID":"{9CEEB177-5311-4C28-A0A8-BB23BDA1835E}","costFlags":2147483681,"fileID":"842b257c27954cb370131b2bb3e38de3ca7a40cb","fileSize":1593800,"fileSizeCaller":1593800,"bytesRequested":1593800,"cdnUrl":"http://2.au.download.windowsupdate.com/c/msdownload/update/software/defu/2021/08/am_engine_patch_1.1.18400.4_842b257c27954cb370131b2bb3e38de3ca7a40cb.exe","routeToCacheServer":"","filePath":"C:\\Windows\\SoftwareDistribution\\Download\\4f76684b381abb0d1ebbc2a2c270b0c9\\842b257c27954cb370131b2bb3e38de3ca7a40cb","groupID":"","background":true,"downloadMode":0,"downloadModeSrc":3,"downloadModeReason":-2133837822,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:29:54.5508385Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":151},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.7.2.4"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"","doClientVersion":"10.0.19041.746","jobID":"454E4646-A013-4662-8362-8B2C05481F15","sessionID":"4F047E68-EB13-4432-AB36-06E92F616F25","predefinedCallerName":"DOContentPolicy","updateID":"{F98C5046-357E-4D19-87D2-5B3186F61383}","costFlags":0,"fileID":"0fe3f9843f708d58b7e4e716c2c02b6403f695ce_zZ39bTRAxISjNFjl85iIxNLc6JeFicduge60BdqPnV8=__0_PHF","fileSize":0,"fileSizeCaller":0,"bytesRequested":0,"cdnUrl":"http://emdl.ws.microsoft.com/emdl/d/dod/ph/prod5/msdownload/update/software/defu/2021/08/1024/am_base_patch1_0fe3f9843f708d58b7e4e716c2c02b6403f695ce.exe.json","routeToCacheServer":"","filePath":"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Microsoft\\Windows\\DeliveryOptimization\\Cache\\fa4f4fc4d7dcd7f084161adeb580838277fbdd7a\\content.phf","groupID":"","background":true,"downloadMode":0,"downloadModeSrc":99,"downloadModeReason":-2147023728,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd","time":"2021-08-19T08:29:54.5562381Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-C42F-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":152},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.2.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ModelName":"Generic Non-PnP Monitor","ModelId":"{00b0927b-ab73-c599-59d5-8b32708d77c3}","PrimaryCategory":"display.monitor","Categories":"display.monitor","IsConnected":"0","IsActive":"1","IsPaired":"0","IsNetworked":"0","IsMachineContainer":"0","FriendlyName":"","DiscoveryMethod":"","ModelNumber":"","Manufacturer":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDeviceContainer","objectInstanceId":"{e24a2162-19da-cc6a-d165-3258f3e9db0a}","syncId":"{182566fd-b9fa-4b38-bc9c-c1dfe8a3573b}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd","time":"2021-08-19T08:29:54.5616631Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-C42F-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":153},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.2.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ModelName":"Microsoft Remote Display Adapter","ModelId":"{2a78354d-cc60-0e91-ef67-ec97d736534e}","PrimaryCategory":"unknown","Categories":"unknown","IsConnected":"1","IsActive":"1","IsPaired":"0","IsNetworked":"0","IsMachineContainer":"0","FriendlyName":"","DiscoveryMethod":"","ModelNumber":"","Manufacturer":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDeviceContainer","objectInstanceId":"{f86d4937-42e2-4ccc-ab87-14987ca500eb}","syncId":"{182566fd-b9fa-4b38-bc9c-c1dfe8a3573b}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:29:54.6204608Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":154},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.7.2.5"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"4F047E68-EB13-4432-AB36-06E92F616F25","predefinedCallerName":"DOContentPolicy","updateID":"{F98C5046-357E-4D19-87D2-5B3186F61383}","jobID":"454E4646-A013-4662-8362-8B2C05481F15","fileID":"0fe3f9843f708d58b7e4e716c2c02b6403f695ce_zZ39bTRAxISjNFjl85iIxNLc6JeFicduge60BdqPnV8=__0_PHF","bytesRequested":643,"fileSize":643,"bytesFromCDN":643,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":0,"dataSourcesTotal":"","cdnUrl":"http://emdl.ws.microsoft.com/emdl/d/dod/ph/prod5/msdownload/update/software/defu/2021/08/1024/am_base_patch1_0fe3f9843f708d58b7e4e716c2c02b6403f695ce.exe.json","cdnIp":"[123.253.149.67]:80;X-CCC:AU;X-CID:2;","routeToCacheServer":"","numPeers":0,"numPeersLocal":0,"expiresAt":"1970-01-01T00:00:00.0000000Z","cdnConnectionCount":0,"cacheServerConnectionCount":0,"lanConnectionCount":0,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":0,"uplinkBps":0,"downlinkUsageBps":0,"uplinkUsageBps":0,"totalTimeMs":69,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":0,"downloadModeSrc":99,"downloadModeReason":0,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:29:54.6218602Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":155},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.7.1.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"ab6b66ad657aca4aa097eafab4f6e56600000000","doClientVersion":"10.0.19041.746","jobID":"454E4646-A013-4662-8362-8B2C05481F15","sessionID":"3F321EF2-7DDF-47D6-AFF8-382AFA13343B","predefinedCallerName":"WU Client Download","updateID":"{F98C5046-357E-4D19-87D2-5B3186F61383}","costFlags":2147483681,"fileID":"0fe3f9843f708d58b7e4e716c2c02b6403f695ce","fileSize":8642992,"fileSizeCaller":8642992,"bytesRequested":8642992,"cdnUrl":"http://2.au.download.windowsupdate.com/d/msdownload/update/software/defu/2021/08/am_base_patch1_0fe3f9843f708d58b7e4e716c2c02b6403f695ce.exe","routeToCacheServer":"","filePath":"C:\\Windows\\SoftwareDistribution\\Download\\cb6e09eabb79c6f50c32eadffd867579\\0fe3f9843f708d58b7e4e716c2c02b6403f695ce","groupID":"","background":true,"downloadMode":0,"downloadModeSrc":3,"downloadModeReason":-2133837822,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryDeviceContainerAdd","time":"2021-08-19T08:29:54.6308687Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-C42F-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":156},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.2.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ModelName":"Generic Non-PnP Monitor","ModelId":"{00b0927b-ab73-c599-59d5-8b32708d77c3}","PrimaryCategory":"display.monitor","Categories":"display.monitor","IsConnected":"1","IsActive":"1","IsPaired":"0","IsNetworked":"0","IsMachineContainer":"0","FriendlyName":"","DiscoveryMethod":"","ModelNumber":"","Manufacturer":"","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryDeviceContainer","objectInstanceId":"{c449ff6d-65dd-425a-59a5-fb675487c7a4}","syncId":"{182566fd-b9fa-4b38-bc9c-c1dfe8a3573b}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.UpdateDetected
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.UpdateDetected","time":"2021-08-19T08:29:58.2648177Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":157},"metadata":{"f":{"NumberOfApplicableUpdates":2,"ServiceGuid":8}},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0.1.1.0.0.5.2"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","NumberOfApplicableUpdates":12,"ApplicableUpdateInfo":"Id:0EB6311B-B7BE-47AA-8EF3-C96715D4AB5E|Rev:1|EventType:1|State:3|Context:0|Deployment:301304133|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:27F6E21D-4A78-49DF-A2D2-8465DA62B94D|Rev:1|EventType:1|State:3|Context:0|Deployment:301304134|PackageFullName:Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:EE956249-26DB-4E73-94BC-5C13DAE224D7|Rev:1|EventType:1|State:3|Context:0|Deployment:301304137|PackageFullName:Microsoft.UI.Xaml.2.4_2.42007.9001.0_x86__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:96023C57-E8D6-42DD-814A-141237A139BF|Rev:1|EventType:1|State:3|Context:0|Deployment:329077774|PackageFullName:Microsoft.VCLibs.140.00_14.0.30035.0_x64__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:46F09E60-E8F9-4B4C-B46D-ECFB8E398F73|Rev:1|EventType:1|State:3|Context:0|Deployment:329079803|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:1297E261-145A-4484-88EE-D8C7B8AB24A6|Rev:1|EventType:1|State:3|Context:0|Deployment:329079804|PackageFullName:Microsoft.VCLibs.140.00.UWPDesktop_14.0.30035.0_x86__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:92BC7769-B1AE-48F6-AC42-373C30BB0BA6|Rev:1|EventType:1|State:3|Context:0|Deployment:329077773|PackageFullName:Microsoft.VCLibs.140.00_14.0.30035.0_x86__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:5281006D-EFBC-4298-86C3-810E696A38E8|Rev:1|EventType:1|State:2|Context:0|Deployment:333151936|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:75CA6E94-40AC-4530-A533-27D6FFF94E66|Rev:1|EventType:1|State:3|Context:0|Deployment:329077771|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:8E4E85A5-6BC6-4306-8F39-01C478241ED4|Rev:1|EventType:1|State:2|Context:0|Deployment:333151937|PackageFullName:Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:A3F3FBAE-190D-4D01-8AD9-3E9FCAB27821|Rev:1|EventType:1|State:3|Context:0|Deployment:329079807|PackageFullName:Microsoft.VCLibs.140.00.UWPDesktop_14.0.30035.0_x64__8wekyb3d8bbwe|BundleIds:F7C06CB9-CD68-4876-A951-1E2D1943B1A3;Id:F7C06CB9-CD68-4876-A951-1E2D1943B1A3|Rev:1|EventType:2|State:2|Context:0|Deployment:333151941","IntentPFNs":"","RelatedCV":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:29:58.2803839Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":158},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0.1.1.0.0.5.3.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"6689AB32-588B-47CE-A3AF-855B60F4E2A0","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","ProcessName":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"00000000-0000-0000-0000-000000000000","SyncType":4,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":0,"ScanDurationInSeconds":6,"ScanEnqueueTime":0,"NumberOfLoop":0,"NumberOfUpdatesEvaluated":588,"NumberOfNewUpdatesFromServiceSync":0,"ServiceUrl":"","Online":false,"AllowCachedResults":false,"MetadataIntegrityMode":0,"TotalNumMetadataSignatures":0,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":0,"ScanProps":0,"NumberOfApplicableUpdates":1,"ApplicableUpdateInfo":"Id:F7C06CB9-CD68-4876-A951-1E2D1943B1A3|Rev:1|EventType:2|State:2|Context:0|Deployment:333151941","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.EndScanForUpdates
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.EndScanForUpdates","time":"2021-08-19T08:29:58.4227035Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":159},"metadata":{"f":{"HResult":2}},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"IsOnline":2,"IsApplicability":0,"IsInteractive":0,"ClientAppId":"Update;ScanForUpdates","HResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.StateTransition
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.StateTransition","time":"2021-08-19T08:29:59.4717005Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":160},"metadata":{"f":{"HResult":2},"privTags":2147483648},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CatalogId":"","FulfillmentPluginId":"WU","PluginTelemetryData":"{\"WorkProperties\":{\"IsInteractive\":0,\"CallerApplicationId\":\"ScanForUpdates\",\"InstallForAllUsers\":0,\"AllowDownloadOnAnyNetwork\":0,\"ForceUseOfNonRemovableStorage\":0,\"AllowForcedAppRestart\":0,\"IsDiscInstall\":0,\"IsRestore\":0,\"Repair\":0,\"StageButDoNotInstall\":0,\"RequiresElevation\":0,\"AutomaticallyDownloadAndInstallUpdateIfFound\":0,\"AllowCachedResult\":0,\"UserIdentityInfo\":\"\",\"VolumePath\":\"\"},\"extendedErrorCode\":0}","Prevstate":"Pending","NewState":"LowPriority","PluginLastStage":0,"HResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.FulfillmentInitiate
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.FulfillmentInitiate","time":"2021-08-19T08:29:59.4735315Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":161},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CatalogId":"","FulfillmentPluginId":"WU","PluginTelemetryData":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.StateTransition
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.StateTransition","time":"2021-08-19T08:30:00.6158437Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":162},"metadata":{"f":{"HResult":2},"privTags":2147483648},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CatalogId":"","FulfillmentPluginId":"WU","PluginTelemetryData":"{\"WorkProperties\":{\"IsInteractive\":0,\"CallerApplicationId\":\"ScanForUpdates\",\"InstallForAllUsers\":0,\"AllowDownloadOnAnyNetwork\":0,\"ForceUseOfNonRemovableStorage\":0,\"AllowForcedAppRestart\":0,\"IsDiscInstall\":0,\"IsRestore\":0,\"Repair\":0,\"StageButDoNotInstall\":0,\"RequiresElevation\":0,\"AutomaticallyDownloadAndInstallUpdateIfFound\":0,\"AllowCachedResult\":0,\"UserIdentityInfo\":\"\",\"VolumePath\":\"\"},\"extendedErrorCode\":0}","Prevstate":"LowPriority","NewState":"Pending","PluginLastStage":0,"HResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.ResumeInstallation
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.ResumeInstallation","time":"2021-08-19T08:30:00.6162652Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":163},"metadata":{"f":{"PreviousInstallState":2,"HResult":2,"PreviousHResult":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CategoryId":"9607e6e2-46a5-4a17-afca-908ffc36d70b","BundleId":"","IsUpdate":1,"IsRemediation":0,"IsInteractive":0,"IsMandatory":0,"IsRestore":0,"AttemptNumber":2,"SystemAttemptNumber":2,"UserAttemptNumber":0,"IsUserRetry":0,"ClientAppId":"Update;ScanForUpdates","ResumeClientId":"","ParentBundleId":"","IsBundle":0,"WUContentId":"","AggregatedPackageFullNames":"Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe","PreviousInstallState":7,"HResult":0,"PreviousHResult":0,"RelatedCV":"qm5ZCQaLQkObB05b.2.0"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.StateTransition
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.StateTransition","time":"2021-08-19T08:30:00.6165176Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":164},"metadata":{"f":{"HResult":2},"privTags":2147483648},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CatalogId":"","FulfillmentPluginId":"WU","PluginTelemetryData":"{\"WorkProperties\":{\"IsInteractive\":0,\"CallerApplicationId\":\"ScanForUpdates\",\"InstallForAllUsers\":0,\"AllowDownloadOnAnyNetwork\":0,\"ForceUseOfNonRemovableStorage\":0,\"AllowForcedAppRestart\":0,\"IsDiscInstall\":0,\"IsRestore\":0,\"Repair\":0,\"StageButDoNotInstall\":0,\"RequiresElevation\":0,\"AutomaticallyDownloadAndInstallUpdateIfFound\":0,\"AllowCachedResult\":0,\"UserIdentityInfo\":\"\",\"VolumePath\":\"\"},\"extendedErrorCode\":0}","Prevstate":"Pending","NewState":"Working","PluginLastStage":0,"HResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.EndAcquireLicense
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.EndAcquireLicense","time":"2021-08-19T08:30:00.6325123Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":165},"metadata":{"f":{"HResult":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CategoryId":"9607e6e2-46a5-4a17-afca-908ffc36d70b","BundleId":"","IsUpdate":1,"IsRemediation":0,"IsInteractive":0,"IsMandatory":0,"IsRestore":0,"AttemptNumber":2,"SystemAttemptNumber":2,"UserAttemptNumber":0,"ClientAppId":"Update;ScanForUpdates","ParentBundleId":"","IsBundle":0,"WUContentId":"baa0f9e7-e2c2-c973-eabd-02bbf7402934","AggregatedPackageFullNames":"Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe","HResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.EndAcquireLicense
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.EndAcquireLicense","time":"2021-08-19T08:30:00.6366672Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":166},"metadata":{"f":{"HResult":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.2"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CategoryId":"9607e6e2-46a5-4a17-afca-908ffc36d70b","BundleId":"","IsUpdate":1,"IsRemediation":0,"IsInteractive":0,"IsMandatory":0,"IsRestore":0,"AttemptNumber":2,"SystemAttemptNumber":2,"UserAttemptNumber":0,"ClientAppId":"Update;ScanForUpdates","ParentBundleId":"","IsBundle":0,"WUContentId":"baa0f9e7-e2c2-c973-eabd-02bbf7402934","AggregatedPackageFullNames":"Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe","HResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:30:01.7489758Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":167},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.3.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"36E0C753-336E-4A4C-9FB4-B70AFA9E238F","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","ProcessName":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":1,"UpdateId":"8E4E85A5-6BC6-4306-8F39-01C478241ED4","RevisionNumber":1,"BundleId":"F7C06CB9-CD68-4876-A951-1E2D1943B1A3","BundleRevisionNumber":1,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe","DownloadProps":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:30:01.7496375Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":505414216,"epoch":"1205429","seq":168},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.3.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"100235AB-9D5C-4998-94CE-AA8063A527BA","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","ProcessName":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":2,"UpdateId":"F7C06CB9-CD68-4876-A951-1E2D1943B1A3","RevisionNumber":1,"BundleId":"00000000-0000-0000-0000-000000000000","BundleRevisionNumber":0,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:30:04.5309570Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":169},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.11.1.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"3df6fb75c002df4b938782a5665d652900000000","doClientVersion":"10.0.19041.746","jobID":"A5958AC7-2FA7-4462-B24E-EAFB37B93C22","sessionID":"BEA610A4-0F54-418E-9D67-D17BB323E935","predefinedCallerName":"WU Client Download","updateID":"{F2260251-4F44-4306-A736-AF11FEEF7E7B}","costFlags":2147483681,"fileID":"a2c3f598a7c6be23059d57a93eed00e08f1f87b7","fileSize":1409480,"fileSizeCaller":1409480,"bytesRequested":1409480,"cdnUrl":"http://2.au.download.windowsupdate.com/d/msdownload/update/software/defu/2021/08/am_delta_a2c3f598a7c6be23059d57a93eed00e08f1f87b7.exe","routeToCacheServer":"","filePath":"C:\\Windows\\SoftwareDistribution\\Download\\2ffba30dce505076316b52d9a4c7bc69\\a2c3f598a7c6be23059d57a93eed00e08f1f87b7","groupID":"","background":true,"downloadMode":99,"downloadModeSrc":99,"downloadModeReason":-2133835749,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:30:05.2723492Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":170},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.10.2.4"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"","doClientVersion":"10.0.19041.746","jobID":"C949AD43-D459-46B1-91B5-4DD9139A943E","sessionID":"BF2A3FD8-5E56-48C8-9CF7-5EFAB8E0E4ED","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","costFlags":0,"fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c__e48JBi+WpomMg8R+4W7Sdznv4CNUprQq/4lkvFAeLsM=_1_PHF","fileSize":0,"fileSizeCaller":0,"bytesRequested":0,"cdnUrl":"http://dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004/pieceshash","routeToCacheServer":"","filePath":"C:\\Windows\\ServiceProfiles\\NetworkService\\AppData\\Local\\Microsoft\\Windows\\DeliveryOptimization\\Cache\\bb582c95057b40e70c5a1fb833ef6b13769471dd\\content.phf","groupID":"","background":true,"downloadMode":0,"downloadModeSrc":99,"downloadModeReason":-2147023728,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:30:05.4748025Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":171},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.10.2.5"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"BF2A3FD8-5E56-48C8-9CF7-5EFAB8E0E4ED","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","jobID":"C949AD43-D459-46B1-91B5-4DD9139A943E","fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c__e48JBi+WpomMg8R+4W7Sdznv4CNUprQq/4lkvFAeLsM=_1_PHF","bytesRequested":2644,"fileSize":2644,"bytesFromCDN":2644,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":0,"dataSourcesTotal":"","cdnUrl":"http://dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004/pieceshash","cdnIp":"[123.253.149.82]:80;X-CCC:AU;X-CID:2;","routeToCacheServer":"","numPeers":0,"numPeersLocal":0,"expiresAt":"1970-01-01T00:00:00.0000000Z","cdnConnectionCount":0,"cacheServerConnectionCount":0,"lanConnectionCount":0,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":0,"uplinkBps":0,"downlinkUsageBps":0,"uplinkUsageBps":0,"totalTimeMs":202,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":0,"downloadModeSrc":99,"downloadModeReason":0,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:30:05.4864873Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":172},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.10.1.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"a5db42b068433d4f8d86a87faa80061000000000","doClientVersion":"10.0.19041.746","jobID":"C949AD43-D459-46B1-91B5-4DD9139A943E","sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","costFlags":2147483681,"fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","fileSize":54804984,"fileSizeCaller":54804984,"bytesRequested":133120,"cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","routeToCacheServer":"","filePath":"","groupID":"","background":true,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:30:05.5794950Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":173},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.3.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"873C0941-4B3F-4AD6-BFCE-1ABA8BA312AD","predefinedCallerName":"WU Client Download","updateID":"{9CEEB177-5311-4C28-A0A8-BB23BDA1835E}","jobID":"264682A1-97F7-4FE3-985F-F041A834F58C","fileID":"842b257c27954cb370131b2bb3e38de3ca7a40cb","bytesRequested":1593800,"fileSize":1593800,"bytesFromCDN":1593800,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":0,"dataSourcesTotal":"2:1593800;","cdnUrl":"http://2.au.download.windowsupdate.com/c/msdownload/update/software/defu/2021/08/am_engine_patch_1.1.18400.4_842b257c27954cb370131b2bb3e38de3ca7a40cb.exe","cdnIp":"[123.253.149.33]:80;X-CCC:AU;X-CID:2;","routeToCacheServer":"","numPeers":0,"numPeersLocal":0,"expiresAt":"2021-08-19T08:31:05.5791233Z","cdnConnectionCount":2,"cacheServerConnectionCount":0,"lanConnectionCount":0,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":0,"uplinkBps":0,"downlinkUsageBps":1593800,"uplinkUsageBps":0,"totalTimeMs":10988,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":0,"downloadModeSrc":3,"downloadModeReason":-2133837822,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:30:05.6816891Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":174},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.11.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"BEA610A4-0F54-418E-9D67-D17BB323E935","predefinedCallerName":"WU Client Download","updateID":"{F2260251-4F44-4306-A736-AF11FEEF7E7B}","jobID":"A5958AC7-2FA7-4462-B24E-EAFB37B93C22","fileID":"a2c3f598a7c6be23059d57a93eed00e08f1f87b7","bytesRequested":1409480,"fileSize":1409480,"bytesFromCDN":1409480,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":0,"dataSourcesTotal":"2:1409480;","cdnUrl":"http://2.au.download.windowsupdate.com/d/msdownload/update/software/defu/2021/08/am_delta_a2c3f598a7c6be23059d57a93eed00e08f1f87b7.exe","cdnIp":"[123.253.149.33]:80;X-CCC:AU;X-CID:2;","routeToCacheServer":"","numPeers":0,"numPeersLocal":0,"expiresAt":"2021-08-19T08:31:05.6814323Z","cdnConnectionCount":2,"cacheServerConnectionCount":0,"lanConnectionCount":0,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":0,"uplinkBps":0,"downlinkUsageBps":1409480,"uplinkUsageBps":0,"totalTimeMs":1108,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":99,"downloadModeSrc":99,"downloadModeReason":-2133835749,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:30:05.8216641Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":175},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.10.1.2"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","jobID":"C949AD43-D459-46B1-91B5-4DD9139A943E","fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","bytesRequested":133120,"fileSize":54804984,"bytesFromCDN":279032,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":0,"dataSourcesTotal":"2:279032;","cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","cdnIp":"[123.253.149.91]:80;X-CCC:AU;X-CID:2;X-MSEdge-Ref:Ref A: A18C641E2C53498C911300B3F78F914D Ref B: BN3EDGE0717 Ref C: 2021-08-06T23:40:08Z;","routeToCacheServer":"","numPeers":0,"numPeersLocal":0,"expiresAt":"2021-08-22T08:30:05.8206569Z","cdnConnectionCount":2,"cacheServerConnectionCount":0,"lanConnectionCount":0,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":0,"uplinkBps":0,"downlinkUsageBps":279032,"uplinkUsageBps":0,"totalTimeMs":298,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:30:06.0864734Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":176},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2,"StatusCode":2,"ExtendedStatusCode":2,"IPVersion":2,"NetworkCost":2,"NetworkRestrictionStatus":2,"ConnectTime":4,"CDNId":2,"ActiveDownloadTime":4,"RepeatFailCount":2,"BytesDownloaded":5,"TotalExpectedBytes":5,"BundleBytesDownloaded":5,"BundleRepeatFailCount":2,"PostDnldTime":2,"SizeCalcTime":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.23.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"A4A8CF52-3548-45BC-8B82-EF82E77FAF41","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":1,"UpdateId":"9CEEB177-5311-4C28-A0A8-BB23BDA1835E","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0,"StatusCode":0,"ExtendedStatusCode":0,"IPVersion":1,"NetworkCost":1,"NetworkRestrictionStatus":1,"ConnectTime":0,"HostName":"download.windowsupdate.com","CDNId":2,"CDNCountryCode":"AU","ActiveDownloadTime":12,"RepeatFailCount":0,"BytesDownloaded":1593800,"TotalExpectedBytes":0,"UsedDO":true,"CbsMethod":0,"BundleBytesDownloaded":0,"BundleRepeatFailCount":0,"AppXBlockHashFailures":0,"AppXScope":"","PostDnldTime":0,"SizeCalcTime":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:30:06.0885260Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":177},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2,"StatusCode":2,"ExtendedStatusCode":2,"IPVersion":2,"NetworkCost":2,"NetworkRestrictionStatus":2,"ConnectTime":4,"CDNId":2,"ActiveDownloadTime":4,"RepeatFailCount":2,"BytesDownloaded":5,"TotalExpectedBytes":5,"BundleBytesDownloaded":5,"BundleRepeatFailCount":2,"PostDnldTime":2,"SizeCalcTime":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.28.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"B6B573E2-0E04-4B34-8A82-9E1D248E5CC4","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":1,"UpdateId":"F2260251-4F44-4306-A736-AF11FEEF7E7B","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0,"StatusCode":0,"ExtendedStatusCode":0,"IPVersion":1,"NetworkCost":1,"NetworkRestrictionStatus":1,"ConnectTime":0,"HostName":"download.windowsupdate.com","CDNId":2,"CDNCountryCode":"AU","ActiveDownloadTime":2,"RepeatFailCount":0,"BytesDownloaded":1409480,"TotalExpectedBytes":0,"UsedDO":true,"CbsMethod":0,"BundleBytesDownloaded":0,"BundleRepeatFailCount":0,"AppXBlockHashFailures":0,"AppXScope":"","PostDnldTime":0,"SizeCalcTime":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:30:06.8535593Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":178},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.23.1.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"a5db42b068433d4f8d86a87faa80061000000000","doClientVersion":"10.0.19041.746","jobID":"37EC9949-4839-4ECF-8106-58F7C71C4A09","sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","costFlags":2147483681,"fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","fileSize":54804984,"fileSizeCaller":54804984,"bytesRequested":66560,"cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","routeToCacheServer":"","filePath":"","groupID":"","background":true,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:30:06.8668540Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":179},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.23.1.2"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","jobID":"37EC9949-4839-4ECF-8106-58F7C71C4A09","fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","bytesRequested":66560,"fileSize":54804984,"bytesFromCDN":0,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":279032,"dataSourcesTotal":"2:279032;","cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","cdnIp":"[123.253.149.91]:80;X-CCC:AU;X-CID:2;X-MSEdge-Ref:Ref A: A18C641E2C53498C911300B3F78F914D Ref B: BN3EDGE0717 Ref C: 2021-08-06T23:40:08Z;","routeToCacheServer":"","numPeers":0,"numPeersLocal":0,"expiresAt":"2021-08-22T08:30:05.8663735Z","cdnConnectionCount":2,"cacheServerConnectionCount":0,"lanConnectionCount":0,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":182916,"uplinkBps":3038,"downlinkUsageBps":0,"uplinkUsageBps":0,"totalTimeMs":8,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:30:07.0058725Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":180},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.7.1.5"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"3F321EF2-7DDF-47D6-AFF8-382AFA13343B","predefinedCallerName":"WU Client Download","updateID":"{F98C5046-357E-4D19-87D2-5B3186F61383}","jobID":"454E4646-A013-4662-8362-8B2C05481F15","fileID":"0fe3f9843f708d58b7e4e716c2c02b6403f695ce","bytesRequested":8642992,"fileSize":8642992,"bytesFromCDN":8642992,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":0,"dataSourcesTotal":"2:8642992;","cdnUrl":"http://2.au.download.windowsupdate.com/d/msdownload/update/software/defu/2021/08/am_base_patch1_0fe3f9843f708d58b7e4e716c2c02b6403f695ce.exe","cdnIp":"[123.253.149.90]:80;X-CCC:AU;X-CID:2;","routeToCacheServer":"","numPeers":0,"numPeersLocal":0,"expiresAt":"2021-08-19T08:31:07.0055781Z","cdnConnectionCount":2,"cacheServerConnectionCount":0,"lanConnectionCount":0,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":182916,"uplinkBps":3038,"downlinkUsageBps":5685517,"uplinkUsageBps":0,"totalTimeMs":12368,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":0,"downloadModeSrc":3,"downloadModeReason":-2133837822,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:30:07.3118644Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":181},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2,"StatusCode":2,"ExtendedStatusCode":2,"IPVersion":2,"NetworkCost":2,"NetworkRestrictionStatus":2,"ConnectTime":4,"CDNId":2,"ActiveDownloadTime":4,"RepeatFailCount":2,"BytesDownloaded":5,"TotalExpectedBytes":5,"BundleBytesDownloaded":5,"BundleRepeatFailCount":2,"PostDnldTime":2,"SizeCalcTime":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.36.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"96056EF6-0E79-4090-8EAA-0B451596E01E","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":1,"UpdateId":"F98C5046-357E-4D19-87D2-5B3186F61383","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0,"StatusCode":0,"ExtendedStatusCode":0,"IPVersion":1,"NetworkCost":1,"NetworkRestrictionStatus":1,"ConnectTime":0,"HostName":"download.windowsupdate.com","CDNId":2,"CDNCountryCode":"AU","ActiveDownloadTime":13,"RepeatFailCount":0,"BytesDownloaded":8642992,"TotalExpectedBytes":0,"UsedDO":true,"CbsMethod":0,"BundleBytesDownloaded":0,"BundleRepeatFailCount":0,"AppXBlockHashFailures":0,"AppXScope":"","PostDnldTime":0,"SizeCalcTime":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:30:07.3124147Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":182},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2,"StatusCode":2,"ExtendedStatusCode":2,"IPVersion":2,"NetworkCost":2,"NetworkRestrictionStatus":2,"ConnectTime":4,"CDNId":2,"ActiveDownloadTime":4,"RepeatFailCount":2,"BytesDownloaded":5,"TotalExpectedBytes":5,"BundleBytesDownloaded":5,"BundleRepeatFailCount":2,"PostDnldTime":2,"SizeCalcTime":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.1.36.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"EA744028-BEF3-4B5A-A697-F1BF97DF2CA3","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":2,"UpdateId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","RevisionNumber":200,"BundleId":"00000000-0000-0000-0000-000000000000","BundleRevisionNumber":0,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0,"StatusCode":0,"ExtendedStatusCode":0,"IPVersion":0,"NetworkCost":0,"NetworkRestrictionStatus":0,"ConnectTime":0,"HostName":"","CDNId":2,"CDNCountryCode":"AU","ActiveDownloadTime":25,"RepeatFailCount":0,"BytesDownloaded":11646272,"TotalExpectedBytes":0,"UsedDO":true,"CbsMethod":0,"BundleBytesDownloaded":11646272,"BundleRepeatFailCount":0,"AppXBlockHashFailures":0,"AppXScope":"","PostDnldTime":0,"SizeCalcTime":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-19T08:30:07.9954116Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":183},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.2.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"844987A3-C655-4267-9986-1D2215E807BB","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":3,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"9CEEB177-5311-4C28-A0A8-BB23BDA1835E","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"HandlerType":0,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":2,"DeploymentProviderHostModule":"wuapi.dll","ClassificationId":"E0789628-CE08-4437-BE74-2495B842F43B","DeploymentMutexId":"8c3fcc84-7410-4a95-8b89-a166a0190486","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-19T08:30:07.9959808Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":184},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.2.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"7D5E6C95-315A-41FB-A8DA-F27F4BBF7F16","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":1,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"F98C5046-357E-4D19-87D2-5B3186F61383","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"HandlerType":0,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":2,"DeploymentProviderHostModule":"wuapi.dll","ClassificationId":"E0789628-CE08-4437-BE74-2495B842F43B","DeploymentMutexId":"8c3fcc84-7410-4a95-8b89-a166a0190486","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-19T08:30:07.9965343Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":185},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.2.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"C599AD27-F01B-43EF-A340-F591DD348580","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":1,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"F2260251-4F44-4306-A736-AF11FEEF7E7B","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"HandlerType":0,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":2,"DeploymentProviderHostModule":"wuapi.dll","ClassificationId":"E0789628-CE08-4437-BE74-2495B842F43B","DeploymentMutexId":"8c3fcc84-7410-4a95-8b89-a166a0190486","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:30:07.9990000Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":186},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.36.1.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"a5db42b068433d4f8d86a87faa80061000000000","doClientVersion":"10.0.19041.746","jobID":"53C1E6B1-0AB8-43DB-B758-4DF42E055E02","sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","costFlags":2147483681,"fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","fileSize":54804984,"fileSizeCaller":54804984,"bytesRequested":23559,"cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","routeToCacheServer":"","filePath":"","groupID":"","background":true,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:30:08.3236546Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":187},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.36.1.2"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","jobID":"53C1E6B1-0AB8-43DB-B758-4DF42E055E02","fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","bytesRequested":23559,"fileSize":54804984,"bytesFromCDN":1048576,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":0,"dataSourcesTotal":"2:1327608;","cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","cdnIp":"[123.253.149.91]:80;X-CCC:AU;X-CID:2;X-MSEdge-Ref:Ref A: A18C641E2C53498C911300B3F78F914D Ref B: BN3EDGE0717 Ref C: 2021-08-06T23:40:08Z;","routeToCacheServer":"","numPeers":8,"numPeersLocal":0,"expiresAt":"2021-08-22T08:30:06.8916065Z","cdnConnectionCount":4,"cacheServerConnectionCount":0,"lanConnectionCount":8,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":228488,"uplinkBps":3288,"downlinkUsageBps":1048576,"uplinkUsageBps":0,"totalTimeMs":324,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:30:11.4051503Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":188},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.52.1.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"a5db42b068433d4f8d86a87faa80061000000000","doClientVersion":"10.0.19041.746","jobID":"49A85F22-2D57-42E8-872E-A08509411445","sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","costFlags":2147483681,"fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","fileSize":54804984,"fileSizeCaller":54804984,"bytesRequested":10400759,"cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","routeToCacheServer":"","filePath":"","groupID":"","background":true,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:30:14.8839740Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":189},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.52.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","jobID":"49A85F22-2D57-42E8-872E-A08509411445","fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","bytesRequested":10400759,"fileSize":54804984,"bytesFromCDN":12582912,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":279032,"dataSourcesTotal":"2:13910520;","cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","cdnIp":"[123.253.149.91]:80;X-CCC:AU;X-CID:2;X-MSEdge-Ref:Ref A: A18C641E2C53498C911300B3F78F914D Ref B: BN3EDGE0717 Ref C: 2021-08-06T23:40:08Z;","routeToCacheServer":"","numPeers":8,"numPeersLocal":0,"expiresAt":"2021-08-22T08:30:08.3548609Z","cdnConnectionCount":4,"cacheServerConnectionCount":0,"lanConnectionCount":8,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":614179,"uplinkBps":6399,"downlinkUsageBps":2883642,"uplinkUsageBps":0,"totalTimeMs":3478,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadStarted","time":"2021-08-19T08:30:15.3636970Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":190},"metadata":{"f":{"errorCode":2,"jobID":8,"sessionID":8,"fileSize":5,"fileSizeCaller":5,"bytesRequested":5,"downloadModeSrc":2,"downloadModeReason":2,"diceRoll":6}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.65.1.1"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"errorCode":0,"peerID":"a5db42b068433d4f8d86a87faa80061000000000","doClientVersion":"10.0.19041.746","jobID":"AEE757B2-2ECA-4EE4-85F6-4B88483A89BC","sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","costFlags":2147483681,"fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","fileSize":54804984,"fileSizeCaller":54804984,"bytesRequested":480,"cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","routeToCacheServer":"","filePath":"","groupID":"","background":true,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"diceRoll":0.43138620500000002,"deviceProfile":65536,"isVpn":0,"isEncrypted":0,"setConfigs":"","isThrottled":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted
logging_binary_name: svchost_?domgmt.dll?
friendly_logging_binary_name: Delivery Optimization Management
payload:
  {"ver":"4.0","name":"Microsoft.OSG.DU.DeliveryOptClient.DownloadCompleted","time":"2021-08-19T08:30:15.3947741Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":191},"metadata":{"f":{"sessionID":8,"jobID":8,"bytesRequested":5,"fileSize":5,"bytesFromCDN":5,"bytesFromCacheServer":5,"bytesFromPeers":5,"bytesFromLinkLocalPeers":5,"bytesFromGroupPeers":5,"bytesFromIntPeers":5,"bytesFromLocalCache":5,"cacheServerConnectionCount":5,"totalTimeMs":5,"restrictedUpload":2,"downloadModeSrc":2,"downloadModeReason":2,"cdnErrorCodes":{"a":2}}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.65.1.2"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":134},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"experimentId":0,"sessionID":"A30078DD-44C1-487E-8EC8-5871037EB58B","predefinedCallerName":"WU Client Download","updateID":"{8E4E85A5-6BC6-4306-8F39-01C478241ED4}","jobID":"AEE757B2-2ECA-4EE4-85F6-4B88483A89BC","fileID":"d6f9ee68a8416e15670892773966aef4bc3b451c","bytesRequested":480,"fileSize":54804984,"bytesFromCDN":0,"bytesFromCacheServer":0,"bytesFromPeers":0,"bytesFromLinkLocalPeers":0,"bytesFromGroupPeers":0,"bytesFromIntPeers":0,"bytesFromLocalCache":1048576,"dataSourcesTotal":"2:13910520;","cdnUrl":"http://2.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/8b69752f-63a4-4b5a-b96d-2b543b2be004?P1=1629363417&P2=404&P3=2&P4=E2VVzibRgMmKlDvOwXaQWZBuJCSJl95njf8RMwyEpC2TaxjB%2bKRBR6T3xyS7MCPZwvxIaSniaEZEt0QPMqJiCA%3d%3d","cdnIp":"[123.253.149.91]:80;X-CCC:AU;X-CID:2;X-MSEdge-Ref:Ref A: A18C641E2C53498C911300B3F78F914D Ref B: BN3EDGE0717 Ref C: 2021-08-06T23:40:08Z;","routeToCacheServer":"","numPeers":8,"numPeersLocal":0,"expiresAt":"2021-08-22T08:30:14.9043318Z","cdnConnectionCount":4,"cacheServerConnectionCount":0,"lanConnectionCount":8,"linkLocalConnectionCount":0,"groupConnectionCount":0,"internetConnectionCount":0,"downlinkBps":614179,"uplinkBps":6399,"downlinkUsageBps":2562589,"uplinkUsageBps":0,"totalTimeMs":30,"groupID":"","background":true,"restrictedUpload":0,"downloadMode":1,"downloadModeSrc":99,"downloadModeReason":0,"cdnErrorCodes":[],"cdnErrorCounts":[],"isVpn":0,"isEncrypted":0,"isThrottled":0,"congestionPrevention":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:30:16.4622147Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":192},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2,"StatusCode":2,"ExtendedStatusCode":2,"IPVersion":2,"NetworkCost":2,"NetworkRestrictionStatus":2,"ConnectTime":4,"CDNId":2,"ActiveDownloadTime":4,"RepeatFailCount":2,"BytesDownloaded":5,"TotalExpectedBytes":5,"BundleBytesDownloaded":5,"BundleRepeatFailCount":2,"PostDnldTime":2,"SizeCalcTime":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.68.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"054F5293-64E5-473C-BF9E-677967B4D080","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","ProcessName":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":1,"UpdateId":"8E4E85A5-6BC6-4306-8F39-01C478241ED4","RevisionNumber":1,"BundleId":"F7C06CB9-CD68-4876-A951-1E2D1943B1A3","BundleRevisionNumber":1,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe","DownloadProps":1,"StatusCode":0,"ExtendedStatusCode":0,"IPVersion":1,"NetworkCost":1,"NetworkRestrictionStatus":1,"ConnectTime":0,"HostName":"tlu.dl.delivery.mp.microsoft.com","CDNId":2,"CDNCountryCode":"AU","ActiveDownloadTime":5,"RepeatFailCount":0,"BytesDownloaded":10624478,"TotalExpectedBytes":0,"UsedDO":true,"CbsMethod":0,"BundleBytesDownloaded":0,"BundleRepeatFailCount":0,"AppXBlockHashFailures":0,"AppXScope":"unknown","PostDnldTime":1,"SizeCalcTime":2}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Download
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Download","time":"2021-08-19T08:30:16.4627942Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":193},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"UpdateImportance":2,"RegulationResult":2,"EventType":2,"UpdateId":8,"BundleId":8,"DownloadPriority":2,"FlightBuildNumber":2,"StatusCode":2,"ExtendedStatusCode":2,"IPVersion":2,"NetworkCost":2,"NetworkRestrictionStatus":2,"ConnectTime":4,"CDNId":2,"ActiveDownloadTime":4,"RepeatFailCount":2,"BytesDownloaded":5,"TotalExpectedBytes":5,"BundleBytesDownloaded":5,"BundleRepeatFailCount":2,"PostDnldTime":2,"SizeCalcTime":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3.1.0.0.68.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"5BC629D8-3EAF-43C5-AA78-F5E328EA247B","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","ProcessName":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"HardwareId":"","UpdateImportance":0,"RegulationResult":0,"EventType":2,"UpdateId":"F7C06CB9-CD68-4876-A951-1E2D1943B1A3","RevisionNumber":1,"BundleId":"00000000-0000-0000-0000-000000000000","BundleRevisionNumber":0,"DownloadPriority":2,"FlightId":"","FlightBuildNumber":0,"PackageFullName":"","DownloadProps":0,"StatusCode":0,"ExtendedStatusCode":0,"IPVersion":0,"NetworkCost":0,"NetworkRestrictionStatus":0,"ConnectTime":2,"HostName":"","CDNId":2,"CDNCountryCode":"AU","ActiveDownloadTime":5,"RepeatFailCount":0,"BytesDownloaded":10624478,"TotalExpectedBytes":0,"UsedDO":true,"CbsMethod":0,"BundleBytesDownloaded":10624478,"BundleRepeatFailCount":0,"AppXBlockHashFailures":0,"AppXScope":"","PostDnldTime":1,"SizeCalcTime":2}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.EndDownload
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.EndDownload","time":"2021-08-19T08:30:16.4877250Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":194},"metadata":{"f":{"DownloadSize":4,"HResult":2,"ExtendedHResult":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CategoryId":"9607e6e2-46a5-4a17-afca-908ffc36d70b","BundleId":"","IsUpdate":1,"IsRemediation":0,"IsInteractive":0,"IsMandatory":0,"IsRestore":0,"AttemptNumber":2,"SystemAttemptNumber":2,"UserAttemptNumber":0,"ClientAppId":"Update;ScanForUpdates;;AllContent","DownloadSize":10624478,"ParentBundleId":"","IsBundle":0,"WUContentId":"baa0f9e7-e2c2-c973-eabd-02bbf7402934","AggregatedPackageFullNames":"Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe","HResult":0,"ExtendedHResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-19T08:30:17.4660611Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":195},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.5.1.0.0.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"793DFB09-2B7B-4890-901F-3C49067C3A0A","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","ProcessName":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":3,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"8E4E85A5-6BC6-4306-8F39-01C478241ED4","RevisionNumber":1,"BundleId":"F7C06CB9-CD68-4876-A951-1E2D1943B1A3","BundleRevisionNumber":1,"HandlerType":9,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":1,"DeploymentProviderHostModule":"wuaueng.dll","ClassificationId":"CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83","DeploymentMutexId":"9607e6e2-46a5-4a17-afca-908ffc36d70b","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-19T08:30:19.1377225Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-9E32-3105D394D701","eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":196},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.5.1.0.0.3.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"C4587974-DACB-4977-A658-6CB76A9AD9E8","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Update;ScanForUpdates","ProcessName":"","ServiceGuid":"855E8A7C-ECB4-4CA3-B045-1DFA50104289","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":3,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"8E4E85A5-6BC6-4306-8F39-01C478241ED4","RevisionNumber":1,"BundleId":"F7C06CB9-CD68-4876-A951-1E2D1943B1A3","BundleRevisionNumber":1,"HandlerType":9,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":1,"DeploymentProviderHostModule":"wuaueng.dll","ClassificationId":"CD5FFD1E-E932-4E3A-BF74-18BF0B1BBD83","DeploymentMutexId":"9607e6e2-46a5-4a17-afca-908ffc36d70b","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.EndInstall
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.EndInstall","time":"2021-08-19T08:30:19.1554475Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":197},"metadata":{"f":{"HResult":2,"ExtendedHResult":2}},"mscv":{"cV":"qm5ZCQaLQkObB05b.2.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CategoryId":"9607e6e2-46a5-4a17-afca-908ffc36d70b","BundleId":"","IsUpdate":1,"IsRemediation":0,"IsInteractive":0,"IsMandatory":0,"IsRestore":0,"AttemptNumber":2,"SystemAttemptNumber":2,"UserAttemptNumber":0,"ClientAppId":"Update;ScanForUpdates","ParentBundleId":"","IsBundle":0,"WUContentId":"baa0f9e7-e2c2-c973-eabd-02bbf7402934","AggregatedPackageFullNames":"Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe","HResult":0,"ExtendedHResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.StateTransition
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.StateTransition","time":"2021-08-19T08:30:19.1556516Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":198},"metadata":{"f":{"HResult":2},"privTags":2147483648},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CatalogId":"","FulfillmentPluginId":"WU","PluginTelemetryData":"{\"OperationType\":\"Update\",\"ClientAppId\":\"Update;ScanForUpdates\",\"ContentId\":\"Microsoft.XboxGamingOverlay_5.721.8052.0_neutral_~_8wekyb3d8bbwe\",\"WUContentId\":\"baa0f9e7-e2c2-c973-eabd-02bbf7402934\",\"IsRemediation\":0,\"CategoryId\":\"9607e6e2-46a5-4a17-afca-908ffc36d70b\",\"ParentBundleId\":\"\",\"DownloadSize\":10624478,\"SystemAttemptNumber\":2,\"UserAttemptNumber\":0,\"AttemptNumber\":2,\"WorkProperties\":{\"IsInteractive\":0,\"CallerApplicationId\":\"ScanForUpdates\",\"InstallForAllUsers\":0,\"AllowDownloadOnAnyNetwork\":0,\"ForceUseOfNonRemovableStorage\":0,\"AllowForcedAppRestart\":0,\"IsDiscInstall\":0,\"IsRestore\":0,\"Repair\":0,\"StageButDoNotInstall\":0,\"RequiresElevation\":0,\"AutomaticallyDownloadAndInstallUpdateIfFound\":0,\"AllowCachedResult\":0,\"UserIdentityInfo\":\"\",\"VolumePath\":\"\"},\"extendedErrorCode\":0}","Prevstate":"Working","NewState":"Completed","PluginLastStage":5,"HResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.StoreAgent.Telemetry.FulfillmentComplete
logging_binary_name: svchost_?InstallService.dll?
friendly_logging_binary_name: InstallService
payload:
  {"ver":"4.0","name":"Microsoft.Windows.StoreAgent.Telemetry.FulfillmentComplete","time":"2021-08-19T08:30:19.1556934Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":770,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":199},"metadata":{"f":{"HResult":2}},"mscv":{"cV":"DL7r7gK+vUCPUSn4.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":217},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"ProductId":"9NZKPSTSNW4P","PFN":"Microsoft.XboxGamingOverlay_8wekyb3d8bbwe","CatalogId":"","FailedRetry":0,"HResult":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-19T08:30:23.3916606Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":200},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"00005fa463f92e21552f832b9e0450647d53765d2d28","Name":"Microsoft OneDrive","Publisher":"Microsoft Corporation","Version":"21.139.0711.0001","Language":65535,"Source":"AddRemoveProgramPerUser","Type":"Application","StoreAppType":"","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"10.0.0.19041","PackageFullName":"","RootDirPath":"%USERPROFILE%\\appdata\\local\\microsoft\\onedrive\\21.139.0711.0001","InstallDate":"08/17/2021 05:51:09","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"0000f0bf27afc153a7e3f2ceded53c7a26f50000ffff","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.InventoryApplicationAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.InventoryApplicationAdd","time":"2021-08-19T08:30:24.9313647Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":201},"metadata":{"f":{"baseData":{"f":{"action":2}}},"privTags":2147485696},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","ProgramInstanceId":"00004a4cd5a0df9b6d18bb177deb57b97c44f5833623","Name":"","Publisher":"","Version":"","Language":0,"Source":"","Type":"","StoreAppType":"","MsiProductCode":"","MsiPackageCode":"","HiddenArp":"false","OSVersionAtInstallTime":"","PackageFullName":"","RootDirPath":"","InstallDate":"","InstallDateMsi":[],"InstallDateFromLinkFile":[],"InstallDateArpLastModified":[],"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryApplication","objectInstanceId":"","syncId":"{f724a70d-522e-4862-a9d6-7163ca99fab9}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:33.3687798Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":202},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"display\\default_monitor\\1&1f0c3c2f&0&uid256","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:33.3690416Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":203},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"display\\default_monitor\\1&1f0c3c2f&0&uid256","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:33.3734545Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":204},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"swd\\mmdevapi\\{3.0.0.00000002}.{6c26ba7d-f0b2-4225-b422-8168c5261e45}","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:33.3735370Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":205},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"swd\\mmdevapi\\{3.0.0.00000002}.{6c26ba7d-f0b2-4225-b422-8168c5261e45}","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:33.3735662Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":206},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"swd\\remotedisplayenum\\rdpidd_indirectdisplay&sessionid_0002","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:33.3736144Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":207},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"swd\\remotedisplayenum\\rdpidd_indirectdisplay&sessionid_0002","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:33.3736358Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":208},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"swd\\scdeviceenumbus\\0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:33.3736756Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":209},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"swd\\scdeviceenumbus\\0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:33.3736936Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":210},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"swd\\scdeviceenumbus\\1","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:33.3737295Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":211},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"swd\\scdeviceenumbus\\1","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:33.3737516Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":212},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2keyboard0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"TRUE","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:33.3738199Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":213},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2keyboard0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:33.3738484Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":214},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H2","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2mouse0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"TRUE","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:33.3739116Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":215},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H2","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2mouse0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount","time":"2021-08-19T08:30:33.3746350Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":216},"metadata":{"privTags":16777216},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.3"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","DatasourceApplicationFile_21H2":"2","DecisionApplicationFile_21H2":"2","DataSourceMatchingInfoBlock_21H2":"0","DecisionMatchingInfoBlock_21H2":"0","DataSourceMatchingInfoPassive_21H2":"10","DecisionMatchingInfoPassive_21H2":"10","DataSourceMatchingInfoPostUpgrade_21H2":"0","DecisionMatchingInfoPostUpgrade_21H2":"0","DecisionMediaCenter_21H2":"1","Wmdrm_21H2":"1","DatasourceDevicePnp_21H2":"70","DecisionDevicePnp_21H2":"70","DatasourceDriverPackage_21H2":"0","DecisionDriverPackage_21H2":"0","DatasourceSystemBios_21H2":"1","DecisionSystemBios_21H2":"1","DecisionTest_21H2":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-19T08:30:33.5085701Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":217},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.4.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousMarkerCompatMarkers_21H2":"0"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount","time":"2021-08-19T08:30:33.5264050Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":218},"metadata":{"privTags":16777216},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.4"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","InventoryApplicationFile":"2","InventoryMediaCenter":"1","InventoryLanguagePack":"1","InventoryUplevelDriverPackage":"0","InventorySystemBios":"1","SystemProcessorCompareExchange":"1","SystemProcessorLahfSahf":"1","SystemMemory":"1","SystemProcessorPrefetchW":"1","SystemProcessorSse2":"1","SystemProcessorNx":"1","SystemWlan":"1","SystemWim":"1","SystemTouch":"1","SystemWindowsActivationStatus":"1","InventoryTest":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:33.5285705Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":219},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.4"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"display\\default_monitor\\1&1f0c3c2f&0&uid256","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd","time":"2021-08-19T08:30:33.7704903Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":220},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"IndicatorValue":"132738353933417217","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUexIndicator","objectInstanceId":"GenTelRunTimestamp","syncId":"{02746298-2979-47AD-885C-6938EF9E3567}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-19T08:30:34.1995495Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":221},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousUexIndicator":"1"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:34.3280252Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":222},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.4"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"display\\default_monitor\\1&1f0c3c2f&0&uid256","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-19T08:30:34.3382746Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":223},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.5.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousMarkerCompatMarkers_21H1":"0"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:34.3670152Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":224},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"swd\\mmdevapi\\{3.0.0.00000002}.{6c26ba7d-f0b2-4225-b422-8168c5261e45}","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:34.3671538Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":225},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"swd\\mmdevapi\\{3.0.0.00000002}.{6c26ba7d-f0b2-4225-b422-8168c5261e45}","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:34.3671917Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":226},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"swd\\remotedisplayenum\\rdpidd_indirectdisplay&sessionid_0002","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:34.3672548Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":227},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"swd\\remotedisplayenum\\rdpidd_indirectdisplay&sessionid_0002","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:34.3672805Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":228},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"swd\\scdeviceenumbus\\0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:34.3673814Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":229},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"swd\\scdeviceenumbus\\0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:34.3674066Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":230},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"swd\\scdeviceenumbus\\1","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:34.3674514Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":231},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"swd\\scdeviceenumbus\\1","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:34.3674772Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":232},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2keyboard0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"TRUE","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:34.3675295Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":233},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2keyboard0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DatasourceDevicePnpAdd","time":"2021-08-19T08:30:34.3675523Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":234},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DatasourceDevicePnp_21H1","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2mouse0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","IsBootCritical":"TRUE","WuDriverCoverage":"FALSE","WuDriverUpdateId":"","WuPopulatedFromId":"","SdbEntries":[],"ActiveNetworkConnection":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.DecisionDevicePnpAdd","time":"2021-08-19T08:30:34.3675965Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":235},"metadata":{"privTags":2048},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"DecisionDevicePnp_21H1","objectInstanceId":"terminput_bus\\umb\\2&2c22bcc9&0&session2mouse0","syncId":"{3feb4590-7938-4f1a-ae32-d7da704c6b71}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"},"AppraiserVersion":"10019645","BlockingDevice":"FALSE","SdbDeviceBlockUpgrade":"FALSE","DisplayGenericMessage":"FALSE","DisplayGenericMessageGated":"FALSE","NeedsDismissAction":"","DriverAvailableUplevel":"TRUE","DriverAvailableInbox":"TRUE","DriverAvailableOnline":"FALSE","BlockAssociatedDriver":"FALSE","AssociatedDriverIsBlocked":"","AssociatedDriverWillNotMigrate":"TRUE","BlockUpgradeIfDriverBlocked":"FALSE","BlockUpgradeIfDriverBlockedAndOnlyActiveNetwork":"FALSE","NotRegressed":"FALSE","SdbDriverBlockOverridden":"FALSE","DriverBlockOverridden":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.ChecksumTotalPictureCount","time":"2021-08-19T08:30:34.3936942Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":236},"metadata":{"privTags":16777216},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.6"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","DatasourceApplicationFile_21H1":"2","DecisionApplicationFile_21H1":"2","DataSourceMatchingInfoBlock_21H1":"0","DecisionMatchingInfoBlock_21H1":"0","DataSourceMatchingInfoPassive_21H1":"10","DecisionMatchingInfoPassive_21H1":"10","DataSourceMatchingInfoPostUpgrade_21H1":"0","DecisionMatchingInfoPostUpgrade_21H1":"0","DecisionMediaCenter_21H1":"1","Wmdrm_21H1":"1","DatasourceDevicePnp_21H1":"70","DecisionDevicePnp_21H1":"70","DatasourceDriverPackage_21H1":"0","DecisionDriverPackage_21H1":"0","DatasourceSystemBios_21H1":"1","DecisionSystemBios_21H1":"1","DecisionTest_21H1":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd","time":"2021-08-19T08:30:36.3474621Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":237},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.7.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"IndicatorValue":"132738353933417217","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUexIndicator_21H1","objectInstanceId":"GenTelRunTimestamp","syncId":"{034AFCC6-3920-4467-9304-0C05E213B3D1}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-19T08:30:36.3500229Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":238},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.7.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousUexIndicator_21H1":"1"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.InventoryMiscellaneousUexIndicatorAdd","time":"2021-08-19T08:30:36.4955823Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":239},"metadata":{"f":{"baseData":{"f":{"action":2}}}},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.8.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"IndicatorValue":"132738353933417217","baseType":"Ms.Device.DeviceInventoryChange","baseData":{"action":1,"objectType":"InventoryMiscellaneousUexIndicator_21H2","objectInstanceId":"GenTelRunTimestamp","syncId":"{A8DF0E67-ACFE-4662-8CEE-227843E7CC51}","inventoryId":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Indicators.Checksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Indicators.Checksum","time":"2021-08-19T08:30:36.5011912Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":240},"metadata":{"f":{"ChecksumDictionary":{"m":{}}}},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.8.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","ChecksumDictionary":{"InventoryMiscellaneousUexIndicator_21H2":"1"}}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:30:39.4820389Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":241},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"IsWUfBFederatedScanDisabled":2,"ActivityMatchingId":8}},"mscv":{"cV":"U7LtzpTazUSZ7muj.1.0.0.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"00000000-0000-0000-0000-000000000000","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Windows Defender","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"IsWUfBFederatedScanDisabled":-1,"ClientVersion":"10.0.19041.1151","ActivityMatchingId":"DFD1E540-01EA-408D-BB09-D6A4447802E2"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:30:39.5050353Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":242},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"IsWUfBFederatedScanDisabled":2,"ActivityMatchingId":8}},"mscv":{"cV":"U7LtzpTazUSZ7muj.1.1.0.1.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Started","EventInstanceID":"00000000-0000-0000-0000-000000000000","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Windows Defender","ProcessName":"","ServiceGuid":"8B24B027-1DEE-BABB-9A95-3517DFB9C552","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"IsWUfBFederatedScanDisabled":-1,"ClientVersion":"10.0.19041.1151","ActivityMatchingId":"6B05B4F3-AFC9-4E7F-A7F1-75242641589B"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Appraiser.General.TelemetryRunHealth
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Appraiser.General.TelemetryRunHealth","time":"2021-08-19T08:30:39.8116574Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":243},"metadata":{"f":{"Time":9,"DeadlineDate":5,"RunDate":5,"RunResult":2},"privTags":16777216},"mscv":{"cV":"FkXWFCvzFU2ytKrx.1.0","cV":"FkXWFCvzFU2ytKrx.1.8"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":226},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Time":"2021-08-19T08:30:39.8030000Z","PCFP":"{1272DA4F-1F02-7D53-C7D1-B536703B9147}","AppraiserVersion":"10019645","AppraiserBranch":"WinBuild","AppraiserProcess":"CompatTelRunner.exe","DeadlineDate":131997384000000000,"RunDate":132738353851639144,"AppraiserDataVersion":2502,"InboxDataVersion":2450,"RunAppraiser":true,"RunGeneralTel":true,"VerboseMode":false,"EnterpriseRun":false,"SendingUtc":true,"ThrottlingUtc":true,"PerfBackoff":false,"PerfBackoffInsurance":false,"StoreHandleIsNotNull":false,"AuxInitial":true,"AuxFinal":false,"TelementrySent":true,"IndicatorsWritten":true,"RunOnline":true,"FullSync":false,"InventoryFullSync":false,"CountCustomSdbs":0,"CustomSdbGuids":"","WhyFullSyncWithoutTablePrefix":"","RunResult":0,"ScheduledUploadDay":33}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-19T08:30:40.4660889Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":244},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.2.5.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"0C00AE21-2EB9-40EF-AE19-40160DA79BA8","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":3,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"9CEEB177-5311-4C28-A0A8-BB23BDA1835E","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"HandlerType":0,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":2,"DeploymentProviderHostModule":"wuapi.dll","ClassificationId":"E0789628-CE08-4437-BE74-2495B842F43B","DeploymentMutexId":"8c3fcc84-7410-4a95-8b89-a166a0190486","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-19T08:30:40.4664996Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":245},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.2.5.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"F030C0EC-E88E-4FAC-A0F6-D9EF8141A1DC","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":1,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"F98C5046-357E-4D19-87D2-5B3186F61383","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"HandlerType":0,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":2,"DeploymentProviderHostModule":"wuapi.dll","ClassificationId":"E0789628-CE08-4437-BE74-2495B842F43B","DeploymentMutexId":"8c3fcc84-7410-4a95-8b89-a166a0190486","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.Install
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.Install","time":"2021-08-19T08:30:40.4668369Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":246},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"TargetGroupId":8,"RepeatFailCount":2,"EventType":2,"UpdateImportance":2,"IsSuccessFailurePostReboot":2,"UpdateId":8,"BundleId":8,"HandlerType":2,"FlightBuildNumber":2,"BundleRepeatFailCount":2,"ClassificationId":8,"ExtendedErrorCode":2,"CSIErrorType":2}},"mscv":{"cV":"hrzHOhU090ib9QEk.1.2.5.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"62A6CAA7-7A57-4996-BCD9-35A8E0EEA73D","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"MoUpdateOrchestrator","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":0,"FeatureUpdatePause":0,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"TargetGroupId":"00000000-0000-0000-0000-000000000000","RepeatFailCount":0,"EventType":1,"TargetingVersion":"","UpdateImportance":0,"IsFirmware":false,"IsFinalOutcomeEvent":false,"DriverPingBack":"","DriverRecoveryIds":"","HardwareId":"","IsSuccessFailurePostReboot":2,"UpdateId":"F2260251-4F44-4306-A736-AF11FEEF7E7B","RevisionNumber":200,"BundleId":"51FE3043-B07A-4F8A-AFF3-25B7B53E5BE7","BundleRevisionNumber":200,"HandlerType":0,"FlightId":"","UsedSystemVolume":true,"FlightBuildNumber":0,"BundleRepeatFailCount":0,"MergedUpdate":0,"DeploymentProviderMode":2,"DeploymentProviderHostModule":"wuapi.dll","ClassificationId":"E0789628-CE08-4437-BE74-2495B842F43B","DeploymentMutexId":"8c3fcc84-7410-4a95-8b89-a166a0190486","ExtendedErrorCode":0,"CSIErrorType":0,"MsiAction":"","MsiProductCode":"","TransactionCode":"","PackageFullName":"","IntentPFNs":"","InstallProps":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:30:41.5258553Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":247},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"U7LtzpTazUSZ7muj.1.0.0.3.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"3BE1B9D0-6807-4C03-960D-7B518F35FC22","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Windows Defender","ProcessName":"","ServiceGuid":"9482F4B4-E343-43B6-B170-9A65BC822C77","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"DFD1E540-01EA-408D-BB09-D6A4447802E2","SyncType":4,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":1,"ScanDurationInSeconds":2,"ScanEnqueueTime":0,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":268,"NumberOfNewUpdatesFromServiceSync":30,"ServiceUrl":"https://fe2cr.update.microsoft.com/v6/ClientWebService/client.asmx","Online":true,"AllowCachedResults":false,"MetadataIntegrityMode":3,"TotalNumMetadataSignatures":104,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":0,"ScanProps":1,"NumberOfApplicableUpdates":0,"ApplicableUpdateInfo":"","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Inventory.Core.AmiTelCacheChecksum
logging_binary_name: compattelrunner.exe
friendly_logging_binary_name: Microsoft Compatibility Telemetry
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Inventory.Core.AmiTelCacheChecksum","time":"2021-08-19T08:30:42.7231921Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":248},"metadata":{"privTags":16777216},"mscv":{"cV":"dyF7+Cj4RUasK6fB.0","cV":"FkXWFCvzFU2ytKrx.7.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000b4108c1d6832f0d036eedcd3d2f684d43be04996!compattelrunner.exe","ver":"2038/11/30:03:05:59!3244C!compattelrunner.exe","asId":211},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InventoryVersion":"10019645","DriverPackageExtended":"0","InventoryApplication":"85","InventoryApplicationDriver":"","InventoryApplicationFramework":"0","InventoryDeviceContainer":"15","InventoryDeviceInterface":"1","InventoryDeviceMediaClass":"1","InventoryDevicePnp":"70","InventoryDriverBinary":"361","InventoryDriverPackage":"0","InventoryDeviceUsbHubClass":"1","InventoryMiscellaneousOfficeAddIn":"0","InventoryMiscellaneousOfficeIdentifiers":"1","InventoryMiscellaneousOfficeIESettings":"1","InventoryMiscellaneousOfficeInsights":"0","InventoryMiscellaneousOfficeSettings":"1","InventoryMiscellaneousOfficeProducts":"1","InventoryMiscellaneousOfficeVBA":"0","InventoryMiscellaneousOfficeVBARuleViolations":"0"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: SoftwareUpdateClientTelemetry.CheckForUpdates
logging_binary_name: svchost_?wuapi.dll?
friendly_logging_binary_name: Windows Update Client API
payload:
  {"ver":"4.0","name":"SoftwareUpdateClientTelemetry.CheckForUpdates","time":"2021-08-19T08:30:45.3078820Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":249},"metadata":{"f":{"EventInstanceID":8,"ServiceGuid":8,"QualityUpdatePause":2,"FeatureUpdatePause":2,"StatusCode":2,"ExtendedStatusCode":2,"ActivityMatchingId":8,"SyncType":2,"IPVersion":2,"NumberOfApplicationsCategoryScanEvaluated":2,"ScanDurationInSeconds":2,"ScanEnqueueTime":2,"NumberOfLoop":2,"NumberOfUpdatesEvaluated":2,"NumberOfNewUpdatesFromServiceSync":2,"MetadataIntegrityMode":2,"NumberOfApplicableUpdates":2,"DeferralPolicySources":2,"QualityUpdateDeferral":2,"FeatureUpdateDeferral":2,"DriverExclusionPolicy":2}},"mscv":{"cV":"U7LtzpTazUSZ7muj.1.1.0.3.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":156},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"EventScenario":"Succeeded","EventInstanceID":"F99B69CA-3677-4444-87FD-90061BC179F8","ClientVersion":"10.0.19041.1151","WUDeviceID":"7f714633-1982-493b-a17a-0fe37eb19292","CallerApplicationName":"Windows Defender","ProcessName":"","ServiceGuid":"8B24B027-1DEE-BABB-9A95-3517DFB9C552","RelatedCV":"","IsWUfBEnabled":0,"IsWUfBDualScanEnabled":0,"QualityUpdatePause":-1,"FeatureUpdatePause":-1,"IsWUfBTargetVersionEnabled":0,"CommonProps":0,"StatusCode":0,"ExtendedStatusCode":0,"ActivityMatchingId":"6B05B4F3-AFC9-4E7F-A7F1-75242641589B","SyncType":2,"IPVersion":1,"NumberOfApplicationsCategoryScanEvaluated":0,"ScanDurationInSeconds":5,"ScanEnqueueTime":2,"NumberOfLoop":1,"NumberOfUpdatesEvaluated":74,"NumberOfNewUpdatesFromServiceSync":0,"ServiceUrl":"https://fe3cr.delivery.mp.microsoft.com/ClientWebService/client.asmx","Online":true,"AllowCachedResults":false,"MetadataIntegrityMode":3,"TotalNumMetadataSignatures":0,"NumFailedMetadataSignatures":0,"DriverSyncPassPerformed":0,"ScanProps":1,"NumberOfApplicableUpdates":0,"ApplicableUpdateInfo":"","WebServiceRetryMethods":0,"DeferredUpdates":"","PausedUpdates":"","BranchReadinessLevel":"CB","DeferralPolicySources":-1,"QualityUpdateDeferral":-1,"PauseQualityUpdatesStartTime":"","PauseQualityUpdatesEndTime":"","QualityUpdatePausePeriod":0,"FeatureUpdateDeferral":-1,"PauseFeatureUpdatesStartTime":"","PauseFeatureUpdatesEndTime":"","FeatureUpdatePausePeriod":0,"DriverExclusionPolicy":-1,"TargetReleaseVersion":"","IntentPFNs":""}}


sid: S-1-5-18
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:31:46.1962079Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"AB094AF8-6BCE-41BA-9A0A-85FDA48FE54C","flags":472908360,"epoch":"1205429","seq":250},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":9},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","AppVersion":"1971/05/25:13:07:28!F55D!csrss.exe","CommandLineHash":3422062667,"AppSessionId":"00000200-0001-000C-1ADA-1512D394D701","AggregationStartTime":"2021-08-19T08:20:29.6150126Z","AggregationDurationMS":676578,"InFocusDurationMS":0,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":9,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":2,"CompositionDirtyPropagatedSec":31,"BackgroundMouseSec":2,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":676578,"EventSequence":1}}


sid: S-1-5-18
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:31:46.1962109Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"126D919C-618A-4DFD-9A3A-3027B9CBC638","flags":472908360,"epoch":"1205429","seq":251},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":9},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","AppVersion":"2072/05/12:15:03:46!6F79!logonui.exe","CommandLineHash":741099408,"AppSessionId":"000003EC-0001-000C-44DB-1B13D394D701","AggregationStartTime":"2021-08-19T08:20:29.6150126Z","AggregationDurationMS":676578,"InFocusDurationMS":672953,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":58078,"UserOrDisplayActiveDurationMS":118078,"UserActiveTransitionCount":0,"InFocusBitmap":"0xFFFFFFFF03000000","InputSec":1,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1024,"WindowHeight":768,"MonitorWidth":1024,"MonitorHeight":768,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":19,"CompositionRenderedSec":29,"CompositionDirtyGeneratedSec":31,"CompositionDirtyPropagatedSec":29,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":674078,"EventSequence":2}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Defender.Shield.ShieldHeartbeat
logging_binary_name: securityhealthservice.exe
friendly_logging_binary_name: Windows Security Health Service
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Defender.Shield.ShieldHeartbeat","time":"2021-08-19T08:32:02.7154352Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":472908360,"epoch":"1205429","seq":252},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000a2eceb28f5852d5d23c613999204e3a6fb93aaa2!securityhealthservice.exe","ver":"2095/02/25:15:45:22!FA053!securityhealthservice.exe","asId":130},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"SummaryHealth":"YELLOW","ThreatProtectionHealth":"GREEN","ThreatProtectionStatus":"Defender_Healthy","DefenderAvHealth":"GREEN","DefenderAvStatus":"Defender_Healthy","NetworkProtectionHealth":"GREEN","NetworkProtectionStatus":"Network_Healthy","HealthAdvisorHealth":"GREY","HealthAdvisorStatus":"HealthAdvisor_Healthy","AppAndBrowserHealth":"YELLOW","AppAndBrowserStatus":"AppAndBrowser_PuaSmartScreenOff","HardwareSecurityHealth":"GREEN","HardwareSecurityStatus":"Hardware_Healthy","AccountProtectionHealth":"GREEN","AccountProtectionStatus":"AccountProtection_Healthy","OsProtectionHealth":"GREY","OsProtectionStatus":"OSProtection_Unknown","DataProtectionHealth":"GREY","DataProtectionStatus":"DataProtection_UnsupportedODVersion","WscJsonStatusAvFw":"{ AvList : [{ AntiVirus : Microsoft Defender Antivirus, Exe : windowsdefender:// , State : 0 , SigUpToDate : True}]{ FwList : [{ Firewall : Windows Firewall, Exe : %windir%\\system32\\firewall.cpl, State: 0, SigUpToDate: True}]","DefenderAvCurrentRunningMode":"Normal","IsRtpEnabled":true,"IsRtpByPolicy":false,"IsCloudEnabled":true,"IsCloudByPolicy":false,"IsSampleSubmissionEnabled":true,"IsSampleSubmissionByPolicy":false,"IsCfaEnabled":false,"IsCfaByPolicy":false,"IsDefenderAvDisabled":false,"IsAvDisableByPolicy":false,"IsDefenderAsDisabled":false,"IsAsDisableByPolicy":false,"SmartScreenAppPolicy":"Warn","SmartScreenEdgePolicy":"Warn","SmartScreenStorePolicy":"Warn"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Census.UserDisplay
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.UserDisplay","time":"2021-08-19T08:33:00.6709800Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":253},"metadata":{"f":{"InternalPrimaryDisplayResolutionHorizontal":2,"InternalPrimaryDisplayResolutionVertical":2,"InternalPrimaryDisplaySizePhysicalH":2,"InternalPrimaryDisplaySizePhysicalY":2,"NumberofInternalDisplays":2,"NumberofExternalDisplays":2},"privTags":2048},"mscv":{"cV":"fziNzhnIykGBT2ND.0","cV":"hpfw6mTBcU6+0UMu.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00009914f5914c02add1d3590844a628b3c5a5fa2c48!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":342},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"InternalPrimaryDisplayLogicalDPIX":96,"InternalPrimaryDisplayLogicalDPIY":96,"InternalPrimaryDisplayPhysicalDPIX":4294967295,"InternalPrimaryDisplayPhysicalDPIY":4294967295,"InternalPrimaryDisplayResolutionHorizontal":1024,"InternalPrimaryDisplayResolutionVertical":768,"InternalPrimaryDisplaySizePhysicalH":271,"InternalPrimaryDisplaySizePhysicalY":203,"NumberofInternalDisplays":0,"NumberofExternalDisplays":1,"VRAMDedicated":0,"VRAMDedicatedSystem":0,"VRAMSharedSystem":4095}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Census.UserNLS
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.UserNLS","time":"2021-08-19T08:33:00.7111727Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":254},"metadata":{"privTags":2048},"mscv":{"cV":"fziNzhnIykGBT2ND.0","cV":"hpfw6mTBcU6+0UMu.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00009914f5914c02add1d3590844a628b3c5a5fa2c48!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":342},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"DefaultAppLanguage":"en-US","HomeLocation":244,"DisplayLanguage":"en-US","SpeechInputLanguages":"en-US","KeyboardInputLanguages":"0409:00000409;"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Census.Userdefault
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.Userdefault","time":"2021-08-19T08:33:00.7114983Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":514,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":255},"metadata":{"privTags":2147485696},"mscv":{"cV":"fziNzhnIykGBT2ND.0","cV":"hpfw6mTBcU6+0UMu.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00009914f5914c02add1d3590844a628b3c5a5fa2c48!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":342},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"DefaultBrowserProgId":"MSEdgeHTM","DefaultApp":".html:MSEdgeHTM|.htm:MSEdgeHTM|.jpg:AppX43hnxtbyyps62jhe9sqpdzxn1790zetc|.jpeg:AppX43hnxtbyyps62jhe9sqpdzxn1790zetc|.png:AppX43hnxtbyyps62jhe9sqpdzxn1790zetc|.mp3:AppXqj98qxeaynz6dv4459ayz6bnqxbyaqcs|.mp4:AppX6eg8h5sxqq90pv53845wmnbewywdqq5h|.mov:AppX6eg8h5sxqq90pv53845wmnbewywdqq5h|.pdf:MSEdgePDF|http:MSEdgeHTM|https:MSEdgeHTM|mailto:AppXydk58wgm44se4b399557yyyj1w7mbmvd","CalendarType":"1","ShortDateFormat":"M/d/yyyy","LongDateFormat":"dddd, MMMM d, yyyy","LocaleName":"en-US"}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Census.UserPrivacySettings
logging_binary_name: devicecensus.exe
friendly_logging_binary_name: Device Census
payload:
  {"ver":"4.0","name":"Census.UserPrivacySettings","time":"2021-08-19T08:33:00.7864832Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WINCORE","flags":506462792,"epoch":"1205429","seq":256},"metadata":{"f":{"Activity":2,"AppDiagnostics":2,"Appointments":2,"Bluetooth":2,"BluetoothSync":2,"BroadFileSystemAccess":2,"CellularData":2,"Chat":2,"Contacts":2,"DocumentsLibrary":2,"Email":2,"GazeInput":2,"HumanInterfaceDevice":2,"Location":2,"LocationHistory":2,"Microphone":2,"PhoneCall":2,"PhoneCallHistory":2,"PicturesLibrary":2,"Radios":2,"SensorsCustom":2,"SerialCommunication":2,"Sms":2,"USB":2,"UserAccountInformation":2,"UserDataTasks":2,"UserNotificationListener":2,"VideosLibrary":2,"Webcam":2,"WifiData":2,"WiFiDirect":2,"ActivityHistoryCollection":2,"ActivityHistoryCloudSync":2,"AdvertisingId":2,"SpeechPersonalization":2,"InkTypePersonalization":2,"InkTypeImprovement":2},"privTags":2048},"mscv":{"cV":"fziNzhnIykGBT2ND.0","cV":"hpfw6mTBcU6+0UMu.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00009914f5914c02add1d3590844a628b3c5a5fa2c48!devicecensus.exe","ver":"2039/05/19:12:13:02!18342!devicecensus.exe","asId":342},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Activity":256,"AppDiagnostics":256,"Appointments":256,"Bluetooth":256,"BluetoothSync":256,"BroadFileSystemAccess":256,"CellularData":256,"Chat":256,"Contacts":256,"DocumentsLibrary":256,"Email":256,"GazeInput":256,"HumanInterfaceDevice":256,"Location":256,"LocationHistory":256,"Microphone":256,"PhoneCall":256,"PhoneCallHistory":256,"PicturesLibrary":256,"Radios":256,"SensorsCustom":256,"SerialCommunication":256,"Sms":256,"USB":256,"UserAccountInformation":256,"UserDataTasks":256,"UserNotificationListener":256,"VideosLibrary":256,"Webcam":256,"WifiData":256,"WiFiDirect":256,"ActivityHistoryCollection":256,"ActivityHistoryCloudSync":512,"AdvertisingId":256,"SpeechPersonalization":262,"InkTypePersonalization":256,"InkTypeImprovement":256}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Shell.CortanaSearch.CortanaStartUpInfo
logging_binary_name: Microsoft.Windows.Search_1.14.2.19041_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Search
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Shell.CortanaSearch.CortanaStartUpInfo","time":"2021-08-19T08:34:52.7120557Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":257},"metadata":{"privTags":16777216},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.Search_1.14.2.19041_neutral_neutral_cw5n1h2txyewy!CortanaUI","ver":"1.14.2.19041_neutral_neutral!1990/06/05:02:31:08!348F80!searchapp.exe","asId":120},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"SessionId":"0B87B8F8537848F4961B31C13A3F20D0","viewId":65950,"entryPoint":"WNSBOX","querySource":"TaskBarSearchBox","secondaryQuerySource":"","positioner":"desktop","coldStart":false,"ClientId":"FD133FDC639D4AE392D342EA16C9877E","launchImpression":"","targetView":""}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:35:00.4927633Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":258},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: consent.exe
friendly_logging_binary_name: Consent UI for administrative applications
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:35:02.6367797Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"3EF4EEC5-B157-4FDF-97EA-08E086E59159","flags":469762632,"epoch":"1205429","seq":259},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001095bd4b63360fc2968d75622aa745e5523428ab!consent.exe","ver":"2095/01/28:21:50:05!379EA!consent.exe","asId":344},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!00001095bd4b63360fc2968d75622aa745e5523428ab!consent.exe","AppVersion":"2095/01/28:21:50:05!379EA!consent.exe","CommandLineHash":1291359594,"AppSessionId":"00000764-0002-000C-4C50-4A19D594D701","AggregationStartTime":"2021-08-19T08:21:39.4412388Z","AggregationDurationMS":803204,"InFocusDurationMS":2125,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":2125,"UserOrDisplayActiveDurationMS":2125,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0000000000010000","InputSec":1,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1024,"WindowHeight":768,"MonitorWidth":1024,"MonitorHeight":768,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":344,"CompositionRenderedSec":1,"CompositionDirtyGeneratedSec":1,"CompositionDirtyPropagatedSec":1,"BackgroundMouseSec":1,"AudioInMS":0,"AudioOutMS":1462,"ViewFlags":0,"SinceFirstInteractivityMS":2141,"EventSequence":4}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:35:02.6625468Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":260},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


full_event_name: TelClientSynthetic.HeartBeat_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_5","time":"2021-08-19T08:50:37.3926553Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":505414216,"epoch":"1205429","seq":261},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"ConsumerDroppedCount":5,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-19T08:20:37.4177586Z","HeartBeatSequenceNumber":52,"EtwDroppedCount":0,"EtwDroppedBufferCount":0,"ConsumerDroppedCount":32,"DecodingDroppedCount":4,"ThrottledDroppedCount":0,"FullTriggerBufferDroppedCount":0,"CriticalDataThrottleDroppedCount":0,"UploaderDroppedCount":0,"InvalidHttpCodeCount":2,"LastInvalidHttpCode":2147954407,"LastEventSizeOffender":"","SettingsHttpAttempts":20,"SettingsHttpFailures":0,"VortexHttpAttempts":29,"EventsUploaded":282,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":65787,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":2,"TopUploaderErrors":["WinHTTP\\v10.events.data.microsoft.com | NetworkError: -2147012889:2"],"MaxInUseScenarioCounter":2,"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":257,"PrivacyBlockedCount":0,"MaxActiveAgentConnectionCount":0,"AgentConnectionErrorsCount":0,"LastAgentConnectionError":0,"Flags":140,"CensusTaskEnabled":1,"CensusExitCode":0,"CensusStartTime":"2021-08-19T08:29:32.691"}}


full_event_name: TelClientSynthetic.HeartBeat_Aria_5
logging_binary_name: ?unknown?
friendly_logging_binary_name: ?unknown?
payload:
  {"ver":"4.0","name":"TelClientSynthetic.HeartBeat_Aria_5","time":"2021-08-19T08:50:37.3999060Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":262},"metadata":{"privTags":16779264,"f":{"PreviousHeartBeatTime":9,"CompressedBytesUploaded":5,"TopUploaderErrors":{},"EventStoreResetSizeSum":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"asId":65},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"PreviousHeartBeatTime":"2021-08-18T03:44:11.4596355Z","HeartBeatSequenceNumber":4,"UploaderDroppedCount":0,"InvalidHttpCodeCount":0,"LastInvalidHttpCode":0,"LastEventSizeOffender":"","SettingsHttpAttempts":0,"SettingsHttpFailures":0,"VortexHttpAttempts":1,"EventsUploaded":1,"VortexHttpFailures4xx":0,"VortexHttpFailures5xx":0,"VortexFailuresTimeout":0,"VortexHttpResponsesWithDroppedEvents":0,"VortexHttpResponseFailures":0,"CompressedBytesUploaded":1301,"RepeatedUploadFailureDropped":0,"UploaderErrorCount":0,"TopUploaderErrors":[],"DbDroppedCount":0,"DbDroppedFullCount":0,"DbDroppedFailureCount":0,"EventStoreLifetimeResetCounter":0,"EventStoreResetCounter":0,"EventStoreResetSizeSum":0,"CriticalOverflowEntersCounter":0,"EnteringCriticalOverflowDroppedCounter":0,"DbCriticalDroppedCount":0,"CriticalDataDbDroppedCount":0,"EventsPersistedCount":1,"PrivacyBlockedCount":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.ContentDeliveryManager.ReportPlacementState
logging_binary_name: Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy
friendly_logging_binary_name: Microsoft Content Background Task Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.ContentDeliveryManager.ReportPlacementState","time":"2021-08-19T08:51:46.9584351Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-DA41-3105D394D701","shellId":33786497904279555,"eventFlags":258,"pgName":"WIN","flags":471859784,"epoch":"1205429","seq":263},"metadata":{"f":{"lastRenderedTime":5,"lastImpressionTime":5,"nextRotationTime":5}},"mscv":{"cV":"Nvkb7BQJlkOuGPlD.0"},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"U:Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App","ver":"10.0.19041.1023_neutral_neutral!1985/07/16:07:12:39!13BB3!backgroundtaskhost.exe","asId":370},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"placementName":"NotificationChannelTask","isEnabled":1,"lastRenderedCreativeId":"0","selectedPlacementId":"","lastRenderedTime":132738367068989849,"lastImpressionTime":132738367069517957,"nextRotationTime":0,"placementStateReportFlags":463}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.PostUpdateUseInfo
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.PostUpdateUseInfo","time":"2021-08-19T08:54:32.0400957Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":264},"metadata":{"f":{"CumulativeUserActiveDurationInS":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"UpdateKey":1466689571,"UpdateCount":1,"CrashCount":0,"SessionCount":4,"LogCount":8,"UserActiveDurationInS":7262,"UserOrDispActiveDurationInS":7262,"DesktopActiveDurationInS":7262,"Version":210,"BootIdMin":9,"BootIdMax":12,"PMUUKey":4048319889,"SessionDurationInS":48492,"SessionUptimeInS":48492,"UserInputInS":3235,"MouseInputInS":1478,"KeyboardInputInS":1841,"SipKeyboardInputInS":0,"TouchInputInS":0,"PrecisionTouchpadInputInS":0,"InForegroundInS":26783,"ForegroundSwitchCount":332,"UserActiveTransitionCount":28,"DeltaLogTimeInS":78605,"DeltaUpdateCount":0,"DeltaCrashCount":0,"DeltaSessionCount":1,"DeltaUserActiveDurationInS":482,"DeltaUserOrDispActiveDurationInS":482,"DeltaDesktopActiveDurationInS":482,"DeltaSessionDurationInS":1972,"DeltaSessionUptimeInS":1972,"DeltaUserInputInS":53,"DeltaMouseInputInS":40,"DeltaKeyboardInputInS":12,"DeltaTouchInputInS":0,"DeltaInForegroundInS":676,"DeltaForegroundSwitchCount":22,"DeltaUserActiveTransitionCount":6,"UATWarningCount":0,"EventReason":3,"CumulativeUserActiveDurationInS":7262,"UpdateCountAccumulationStarted":1,"BuildUserActiveDurationInS":7262,"BuildNumber":19041}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:54:32.0402378Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"AEEFD5BB-0E12-4336-88D6-DB9F8F1FB498","flags":469762632,"epoch":"1205429","seq":265},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","AppVersion":"1971/05/25:13:07:28!F55D!csrss.exe","CommandLineHash":3422062667,"AppSessionId":"0000020C-0002-000C-F03E-C33BD394D701","AggregationStartTime":"2021-08-19T08:21:39.4412388Z","AggregationDurationMS":1972610,"InFocusDurationMS":0,"FocusLostCount":8,"NewProcessCount":1,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x1114000000010000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":88,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":34,"CompositionDirtyPropagatedSec":466,"BackgroundMouseSec":7,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":1972610,"EventSequence":5}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:54:32.0402411Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"A51618AD-1B41-4B61-AD05-1CC58C0D27AD","flags":469762632,"epoch":"1205429","seq":266},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000cba902270e1f72af9304b174b394b9bcef6d6f7f!explorer.exe","AppVersion":"1991/07/18:17:41:12!4A83CE!explorer.exe","CommandLineHash":2376842926,"AppSessionId":"00001358-0002-000C-A5E9-6A3DD394D701","AggregationStartTime":"2021-08-19T08:21:39.4412388Z","AggregationDurationMS":1972610,"InFocusDurationMS":111376,"FocusLostCount":4,"NewProcessCount":1,"UserActiveDurationMS":107079,"UserOrDisplayActiveDurationMS":107079,"UserActiveTransitionCount":2,"InFocusBitmap":"0x1F1C000080000000","InputSec":29,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":1,"MouseInputSec":28,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1024,"WindowHeight":40,"MonitorWidth":1024,"MonitorHeight":768,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":110,"CompositionRenderedSec":146,"CompositionDirtyGeneratedSec":138,"CompositionDirtyPropagatedSec":69,"BackgroundMouseSec":14,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":1969360,"EventSequence":6}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:54:32.0402432Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"84CE10D0-9962-4FF7-B751-C84DD981CBCB","flags":469762632,"epoch":"1205429","seq":267},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"U:Microsoft.Windows.Search_1.14.2.19041_neutral_neutral_cw5n1h2txyewy!CortanaUI","AppVersion":"1.14.2.19041_neutral_neutral!1990/06/05:02:31:08!348F80!searchapp.exe","CommandLineHash":3630742416,"AppSessionId":"000016FC-0002-000C-6918-5142D394D701","AggregationStartTime":"2021-08-19T08:21:39.4412388Z","AggregationDurationMS":1972610,"InFocusDurationMS":542498,"FocusLostCount":4,"NewProcessCount":1,"UserActiveDurationMS":84529,"UserOrDisplayActiveDurationMS":84529,"UserActiveTransitionCount":1,"InFocusBitmap":"0x00F0FFFFFF010000","InputSec":15,"KeyboardInputSec":10,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":5,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":760,"WindowHeight":680,"MonitorWidth":1024,"MonitorHeight":768,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":120,"CompositionRenderedSec":38,"CompositionDirtyGeneratedSec":28,"CompositionDirtyPropagatedSec":21,"BackgroundMouseSec":2,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":1961500,"EventSequence":8}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:54:32.0402453Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"29CAD725-7511-49F6-B06A-E0614D71BAE8","flags":469762632,"epoch":"1205429","seq":268},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000c313e591b29d8be1cbe3809826a6a8647314698e!conhost.exe","AppVersion":"2017/11/03:09:20:41!D8A8E!conhost.exe","CommandLineHash":4018159560,"AppSessionId":"00001BB4-0002-000C-E142-B8D3D394D701","AggregationStartTime":"2021-08-19T08:21:39.4412388Z","AggregationDurationMS":1972610,"InFocusDurationMS":3297,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":3297,"UserOrDisplayActiveDurationMS":3297,"UserActiveTransitionCount":0,"InFocusBitmap":"0x00000000C0000000","InputSec":3,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":3,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":873,"WindowHeight":728,"MonitorWidth":1024,"MonitorHeight":768,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":197,"CompositionRenderedSec":36,"CompositionDirtyGeneratedSec":5,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":2,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":1714406,"EventSequence":11}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:54:32.0402469Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"966ACB3D-1209-4C96-B1D9-D40DE842349C","flags":469762632,"epoch":"1205429","seq":269},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!00005f2596b6c147e13a32c7d73ef1c1365ba0171687!powershell_ise.exe","AppVersion":"2103/02/21:08:22:01!35D26!powershell_ise.exe","CommandLineHash":1548197259,"AppSessionId":"00001F58-0002-000C-AD2E-A21AD594D701","AggregationStartTime":"2021-08-19T08:21:39.4412388Z","AggregationDurationMS":1972610,"InFocusDurationMS":1167985,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":207109,"UserOrDisplayActiveDurationMS":207109,"UserActiveTransitionCount":2,"InFocusBitmap":"0x0000000000FFFFFF","InputSec":28,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":1,"MouseInputSec":27,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1040,"WindowHeight":744,"MonitorWidth":1024,"MonitorHeight":768,"MonitorFlags":0,"WindowFlags":10,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":346,"CompositionRenderedSec":369,"CompositionDirtyGeneratedSec":325,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":1168828,"EventSequence":12}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:54:52.6285817Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":270},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":387},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_MOUSE","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":2085343,"deviceTimeSinceLastReadEndMs":2085343,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-18
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:54:52.6307344Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":271},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":387},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_KEYBOARD","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":2085359,"deviceTimeSinceLastReadEndMs":2085359,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:54:52.8332241Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-3544-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":1040187976,"epoch":"1205429","seq":272},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":13,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0003#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":2220011,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":0,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":20085}}


sid: S-1-5-18
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:54:52.8629270Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-4D44-3105D394D701","eventFlags":258,"pgName":"WIN","flags":1006633544,"epoch":"1205429","seq":273},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":10,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":0,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&31c5ecd4&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":2220011,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0003#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-90-0-3
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:54:52.8713842Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":742392392,"epoch":"1205429","seq":274},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":393},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:85FC64C5-F7F7-9836-D5FD-5C91E1CD577A"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.CredProvDataModel.SignedInCredProv
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.CredProvDataModel.SignedInCredProv","time":"2021-08-19T08:54:53.1253773Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":275},"metadata":{"f":{"ntsStatus":2,"ntsSubstatus":2},"privTags":50331648},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":391},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"credProviderGuid":"{60B78E88-EAD8-445C-9CFD-0B87F74EA6CD}","userType":1,"logonUiReason":0,"credProvScenario":0,"ntsStatus":0,"ntsSubstatus":0}}


sid: S-1-5-90-0-3
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:54:53.1949909Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":742392392,"epoch":"1205429","seq":276},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":393},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:85FC64C5-F7F7-9836-D5FD-5C91E1CD577A"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:54:53.3908286Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":277},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_MOUSE","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":2086125,"deviceTimeSinceLastReadEndMs":2086125,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Win32kBase.Input.RimDeviceCreated
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Win32kBase.Input.RimDeviceCreated","time":"2021-08-19T08:54:53.3910173Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":278},"metadata":{"f":{"deviceContainerId":8,"deviceQueuedFrames":5,"deviceNotificationEntry":5,"deviceOpenStatus":2,"deviceReadStatus":2,"deviceReadCompletionStatus":2,"deviceTimeSinceLastReadStartMs":5,"deviceTimeSinceLastReadEndMs":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":88},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"hidUsage":0,"hidUsagePage":0,"deviceType":"RIM_INPUT_TYPE_KEYBOARD","deviceName":"","isInjection":false,"deviceLocation":"Integrated","deviceContainerId":"00000000-0000-0000-0000-000000000000","deviceQueuedFrames":0,"deviceRetryRead":0,"deviceRetryErrorCompletion":0,"deviceRetrySiblingConfig":0,"deviceNotificationEntry":0,"deviceOpenStatus":0,"deviceReadStatus":0,"deviceReadCompletionStatus":0,"deviceTimeSinceLastReadStartMs":2086125,"deviceTimeSinceLastReadEndMs":2086125,"isDeviceReading":false,"isFirstReadComplete":false}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:54:53.4118854Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":279},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-19T08:54:53.5976027Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":280},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":391},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":5,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Security.PasswordlessPolicy.IsAccountPasswordless","time":"2021-08-19T08:54:53.5977165Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":281},"metadata":{"f":{"count":4,"velocityNewDevices":2,"retVal":2},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":391},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"count":1,"platformType":1,"policyValue":0,"userConfigValue":0,"devicePasswordlessVersion":2,"velocityNewDevices":1,"velocityForcedPasswordless":1,"velocityWin10S":1,"velocityWin10SKillSwitch":0,"accountType":1,"accountPasswordless":0,"accountCloudPasswordless":0,"passwordlessType":0,"retVal":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo
logging_binary_name: svchost_?AudioEndpointBuilder.dll?
friendly_logging_binary_name: Windows Audio Endpoint Builder
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Audio.EndpointBuilder.DeviceInfo","time":"2021-08-19T08:54:53.6167589Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1205429","seq":282},"metadata":{"f":{"ContainerId":8,"streamEffectClsid":8,"modeEffectClsid":8,"endpointEffectClsid":8,"localEffectClsid":8,"globalEffectClsid":8,"MicArrayGeometry":{"f":{"usFrequencyBandHi":2,"usFrequencyBandLo":2,"usMicArrayType":2,"usNumberOfMicrophones":2,"usVersion":2,"wHorizontalAngleBegin":2,"wHorizontalAngleEnd":2,"wVerticalAngleBegin":2,"wVerticalAngleEnd":2}}},"privTags":16779264},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000010db07461e45b41c886192df6fd425ba8d42d82!svchost.exe","ver":"1972/12/14:16:22:50!1C364!svchost.exe","asId":47},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"endpointInstanceId":"SWD\\MMDEVAPI\\{3.0.0.00000002}.{6C26BA7D-F0B2-4225-B422-8168C5261E45}","HWID":"","DeviceInstanceId":"","BusEnumeratorName":"","EndpointDevnodeId":"","EndpointFormFactor":0,"JackSubType":"","endpointID":"{6C26BA7D-F0B2-4225-B422-8168C5261E45}","IsBluetooth":0,"IsUSB":0,"IsSideband":0,"ContainerId":"00000000-0000-0000-0000-000000000000","Flow":0,"streamEffectClsid":"00000000-0000-0000-0000-000000000000","streamEffectModule":"","modeEffectClsid":"00000000-0000-0000-0000-000000000000","modeEffectModule":"","endpointEffectClsid":"00000000-0000-0000-0000-000000000000","endpointEffectModule":"","localEffectClsid":"00000000-0000-0000-0000-000000000000","localEffectModule":"","globalEffectClsid":"00000000-0000-0000-0000-000000000000","globalEffectModule":"","MicArrayGeometry":{"usFrequencyBandHi":0,"usFrequencyBandLo":0,"usMicArrayType":0,"usNumberOfMicrophones":0,"usVersion":0,"wHorizontalAngleBegin":0,"wHorizontalAngleEnd":0,"wVerticalAngleBegin":0,"wVerticalAngleEnd":0,"MicCoords":[]},"persistentId":"","isFarField":0,"AudioPosture - Supported":0}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.GPUAdapterInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.GPUAdapterInventoryV2","time":"2021-08-19T08:54:53.6199401Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0000-BE44-3105D394D701","eventFlags":258,"pgName":"WINCORE","flags":503317064,"epoch":"1205429","seq":283},"metadata":{"f":{"DriverDate":9,"DisplayAdapterLuid":5,"DedicatedVideoMemoryB":5,"DedicatedSystemMemoryB":5,"SharedSystemMemoryB":5,"InterfaceFuncPointersProvided1":5,"InterfaceFuncPointersProvided2":5,"IddPairedRenderAdapterLuid":5},"privTags":2048},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"bootId":12,"aiSeqId":14,"MeasureEnabled":true,"TelemetryEnabled":true,"InterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","GPUVendorID":5140,"GPUDeviceID":139,"SubVendorID":0,"SubSystemID":0,"GPURevisionID":0,"DriverVersion":"10.0.19041.662","DriverDate":"2006-06-21T00:00:00.0000000Z","DriverRank":16711680,"IsMiracastSupported":false,"IsMsMiracastSupported":true,"IsHybridDiscrete":false,"IsHybridIntegrated":false,"IsMPOSupported":false,"IsHwSchEnabled":false,"IsHwSchSupported":false,"IsLDA":false,"IsMismatchLDA":false,"IsPostAdapter":false,"IsSoftwareDevice":false,"IsRenderDevice":false,"IsDisplayDevice":true,"AdapterTypeValue":66,"IsRemovable":true,"BrightnessVersionViaDDI":0,"WDDMVersion":1300,"DisplayAdapterLuid":2268796,"GPUPreemptionLevel":0,"ComputePreemptionLevel":0,"TelInvEvntTrigger":0,"DedicatedVideoMemoryB":0,"DedicatedSystemMemoryB":0,"SharedSystemMemoryB":0,"NumVidPnSources":16,"NumVidPnTargets":16,"NumNonVidPnTargets":0,"KMDFilePath":"\\SystemRoot\\System32\\drivers\\IndirectKmd.sys","DX9UMDFilePath":"","DX10UMDFilePath":"","DX11UMDFilePath":"","DX12UMDFilePath":"","DDIInterfaceVersion":49156,"InterfaceFuncPointersProvided1":145135794024449,"InterfaceFuncPointersProvided2":4036914117863341056,"Display1UMDFilePath":"","DriverWorkarounds":"0x00000000","IddPairedRenderAdapterLuid":20085}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest
logging_binary_name: dwm.exe
friendly_logging_binary_name: Desktop Window Manager
payload:
  {"ver":"4.0","name":"Microsoft.Windows.Analog.HydrogenCompositor.DwmHolographicSuspendRequest","time":"2021-08-19T08:54:53.6751606Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":257,"pgName":"WIN","flags":205521480,"epoch":"1205429","seq":284},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000f92f8b7439ce1de4c297046ed1d3ff9f20bc97af!dwm.exe","ver":"2027/05/13:02:29:41!18716!dwm.exe","asId":93},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"Suspend":0}}


sid: S-1-5-18
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: logonui.exe
friendly_logging_binary_name: Windows Logon User Interface Host
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:54:53.6794375Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"3A53B172-0994-4B83-81E9-A875F0B5F762","flags":469762632,"epoch":"1205429","seq":285},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","ver":"2072/05/12:15:03:46!6F79!logonui.exe","asId":391},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!0000fbf39a288fc46cbf0620cfd297395a8fb4fbcdad!logonui.exe","AppVersion":"2072/05/12:15:03:46!6F79!logonui.exe","CommandLineHash":2994971169,"AppSessionId":"00000DAC-0003-000C-69CB-EFDFD794D701","AggregationStartTime":"2021-08-19T08:54:52.6288515Z","AggregationDurationMS":1047,"InFocusDurationMS":266,"FocusLostCount":1,"NewProcessCount":1,"UserActiveDurationMS":266,"UserOrDisplayActiveDurationMS":266,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":1,"KeyboardInputSec":1,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":1,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":1920,"WindowHeight":1080,"MonitorWidth":1920,"MonitorHeight":1080,"MonitorFlags":0,"WindowFlags":16,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":391,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":0,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":0,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":500,"EventSequence":1}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: DxgKrnlTelemetry.DisplayInventoryV2
logging_binary_name: dxgkrnl.sys
friendly_logging_binary_name: DirectX Graphics Kernel
payload:
  {"ver":"4.0","name":"DxgKrnlTelemetry.DisplayInventoryV2","time":"2021-08-19T08:54:53.8274692Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"aId":"05310F6B-94D3-0001-E54E-3105D394D701","eventFlags":258,"pgName":"WIN","flags":469762632,"epoch":"1205429","seq":286},"metadata":{"f":{"DisplayAdapterLuid":5}},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000da39a3ee5e6b4b0d3255bfef95601890afd80709!00001100000000000000000000000000000000000000!","ver":"1970/01/01:00:00:00!0!","asId":1},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:295488AC-C008-DCC6-CE6C-2CBEDE1E802E"},"loc":{"tz":"+10:00"}},"data":{"version":11,"diSeqId":11,"MeasureEnabled":false,"TelemetryEnabled":false,"EventTriggerReason":0,"ConnectorType":4294967295,"InterfaceId":"\\??\\DISPLAY#Default_Monitor#1&1f0c3c2f&0&UID256#{e6f07b5f-ee97-4a90-b076-33f57bf4eaa7}","HasEDID":false,"TargetID":256,"DisplayAdapterLuid":2268796,"AdapterInterfaceId":"\\??\\SWD#RemoteDisplayEnum#RdpIdd_IndirectDisplay&SessionId_0002#{1ca05180-a699-450a-9a0c-de4fbe3ddd89}","ColorDepths":"0x0000000000000000000000000000000000000000","ColorimetryData":"0x0000000000000000","ColorData":"0x0000000000000000000000000000000000000000000000000000000000000000","ColorDataSource":0,"MinLuminance":0,"MaxLuminance":0,"MaxFullFrameLuminance":0,"IsLuminanceValueRaw":false,"IsEOTF2084Supported":false,"LinkInfoValid":false,"WideColorSpace":false,"HighColorSpace":false,"VariableRefresh":false,"MonitorAndLinkHDRCapable":false,"MonitorAndLinkHDRPlusCapable":false,"MonitorAndLinkDolbyVisionLowLatencyCapable":false,"MonitorAndDriverWCGCapable":false,"AdvancedColorDisabledByUser":true,"WCGEnforced":false,"SDRWhiteLevel":3000,"LinkInfoDitheringSupport":0,"EDID":"0x","EDIDBlockCount":0,"Manufacturer":"","ProductCode":"","WeekOfManufacture":0,"YearOfManufacture":0,"HasPreferredMode":true,"PreferredResolutionWidth":0,"PreferredResolutionHeight":0,"PreferredSignalStandard":0,"PreferredScanLineOrdering":0,"PreferredRefreshNumerator":0,"PreferredRefreshDenominator":0,"PhysicalWidth":0,"PhysicalHeight":0,"EEDIDBlock":"0x","HasDisplayID":false,"DisplayIDBlob":"0x"}}


sid: S-1-5-18
full_event_name: Win32kTraceLogging.AppInteractivitySummary
logging_binary_name: csrss.exe
friendly_logging_binary_name: Client Server Runtime Process
payload:
  {"ver":"4.0","name":"Win32kTraceLogging.AppInteractivitySummary","time":"2021-08-19T08:54:55.0415539Z","iKey":"o:0a89d516ae714e01ae89c96d185e9ae3","ext":{"utc":{"eventFlags":258,"pgName":"WIN","stId":"B80D6631-0014-4CF5-ADBB-D685FCBE78A7","flags":469762632,"epoch":"1205429","seq":287},"metadata":{"f":{"PartATransform_AppSessionGuidToUserSid":8,"AppSessionId":8,"AggregationStartTime":9,"ViewFlags":5,"EventSequence":5},"privTags":33554432},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"app":{"id":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","ver":"1971/05/25:13:07:28!F55D!csrss.exe","asId":387},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"user":{"localId":"w:B04E2543-63EB-D3C6-4722-FBFE64FA31C0"},"loc":{"tz":"+10:00"}},"data":{"AppId":"W:0000f519feec486de87ed73cb92d3cac802400000000!000011eba7b1e26cc7d492a2c161ac48370811d0b01e!csrss.exe","AppVersion":"1971/05/25:13:07:28!F55D!csrss.exe","CommandLineHash":3422062667,"AppSessionId":"00000B34-0003-000C-50E4-D8DFD794D701","AggregationStartTime":"2021-08-19T08:54:52.6288515Z","AggregationDurationMS":2422,"InFocusDurationMS":0,"FocusLostCount":2,"NewProcessCount":1,"UserActiveDurationMS":0,"UserOrDisplayActiveDurationMS":0,"UserActiveTransitionCount":0,"InFocusBitmap":"0x0100000000000000","InputSec":0,"KeyboardInputSec":0,"SipKeyboardInputSec":0,"InjectedKeyboardInputSec":0,"MouseInputSec":0,"InjectedMouseInputSec":0,"TouchInputSec":0,"InjectedTouchInputSec":0,"PenInputSec":0,"InjectedPenInputSec":0,"PrecisionTouchpadInputSec":0,"InjectedPrecisionTouchpadInputSec":0,"HidInputSec":0,"WindowWidth":0,"WindowHeight":0,"MonitorWidth":0,"MonitorHeight":0,"MonitorFlags":0,"WindowFlags":0,"InteractiveTimeoutPeriodMS":60000,"AggregationPeriodMS":1200000,"BitPeriodMS":20000,"AggregationFlags":49,"SummaryRound":0,"SpeechRecognitionSec":0,"GameInputSec":0,"TargetAsId":387,"CompositionRenderedSec":0,"CompositionDirtyGeneratedSec":0,"CompositionDirtyPropagatedSec":0,"BackgroundMouseSec":2,"AudioInMS":0,"AudioOutMS":0,"ViewFlags":0,"SinceFirstInteractivityMS":2422,"EventSequence":2}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
full_event_name: Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended
logging_binary_name: msedge.exe
friendly_logging_binary_name: Microsoft Edge
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_BeforeNavigateExtended","time":"2021-08-19T08:56:05.1723232Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1205429","seq":288},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"FrameId":4,"TabId":4,"client_id":4,"navigationUrlRejectCode":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":16777218},"app":{"name":"msedge","id":"W:0006a4a164c2eb7318cd3db378a54d6fec1d00000904!0000dc021c62850ba3aad6e94970f657bda12a19036c!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":405},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:FrameId;t:2","n:IsTopLevelUrl;t:1","n:TabId;t:2","n:client_id;t:2","n:navigationUrlRejectCode;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","CorrelationGuid":"c06d8aa8-d1b2-4f71-b9df-81ddefae5ddc","EventInfo.Level":3,"FrameId":1,"IsTopLevelUrl":1,"TabId":2,"Timestamp":"2021-08-19T08:55:51.767Z","client_id":-8972017550787008273,"navigationUrl":"http://firefox.com/","navigationUrlRejectCode":0,"payload_id":55834574849,"pop_sample":100,"utc_flags":140737488355328}}


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: Microsoft Edge
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_PreferenceHomepageCurrent","time":"2021-08-19T08:56:05.1724403Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1205429","seq":289},"metadata":{"f":{"Channel":4,"EventInfo.Level":4,"HomepageCurrentRejectCode":4,"client_id":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":33554432},"app":{"name":"msedge","id":"W:0006a4a164c2eb7318cd3db378a54d6fec1d00000904!0000dc021c62850ba3aad6e94970f657bda12a19036c!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":405},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:EventInfo.Level;t:2","n:HomepageCurrentRejectCode;t:2","n:client_id;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","EventInfo.Level":2,"HomepageCurrentRejectCode":107,"HomepageCurrentUrl":"","Timestamp":"2021-08-19T08:55:39.754Z","client_id":-8972017550787008273,"payload_id":55834574849,"pop_sample":100,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 102 characters]


sid: S-1-5-21-1606949423-195478582-1932232446-1002
logging_binary_name: msedge.exe
friendly_logging_binary_name: Microsoft Edge
payload:
  {"ver":"4.0","name":"Aria.218d658af29e41b6bc37144bd03f018d.Microsoft.WebBrowser.HistoryJournal.HJ_PreferenceDefaultSearchProviderCurrent","time":"2021-08-19T08:56:05.1726077Z","iKey":"P-ARIA-218d658af29e41b6bc37144bd03f018d-6bd1d102-d792-414e-a9d8-315e766da244-7471","ext":{"utc":{"shellId":33786497904279555,"eventFlags":524546,"pgName":"ARIA","flags":469762632,"epoch":"1205429","seq":290},"metadata":{"f":{"Channel":4,"DSPCurrentRejectCode":4,"EventInfo.Level":4,"client_id":4,"payload_id":4,"pop_sample":6,"utc_flags":4},"privTags":33554432},"app":{"name":"msedge","id":"W:0006a4a164c2eb7318cd3db378a54d6fec1d00000904!0000dc021c62850ba3aad6e94970f657bda12a19036c!msedge.exe","ver":"2021/08/11:22:26:42!337369!msedge.exe","asId":405},"net":{"cost":"Unmetered","type":"Unknown"},"ariaMD":{"fields":["n:Channel;t:2","n:DSPCurrentRejectCode;t:2","n:EventInfo.Level;t:2","n:client_id;t:2","n:payload_id;t:2","n:pop_sample;t:3","n:utc_flags;t:2"]},"os":{"bootId":12,"name":"Windows","ver":"10.0.19041.1165.amd64fre.vb_release.191206-1406"},"device":{"localId":"s:5A2CD9B2-5E46-4396-99A8-5C79DF95E368","deviceClass":"Windows.Desktop"},"protocol":{"devMake":"innotek GmbH","devModel":"VirtualBox"},"loc":{"tz":"+10:00"}},"data":{"Channel":4,"ConnectionType":"Ethernet","DSPCurrentRejectCode":0,"DSPCurrentUrl":"{bing:baseURL}search?q={searchTerms}&{bing:cvid}{bing:msb}{google:assistedQueryStats}","EventInfo.Level":2,"Timestamp":"2021-08-19T08:55:39.754Z","client_id":-8972017550787008273,"payload_id":55834574849,"pop_sample":100,"utc_flags":140737488355328}}

full_event_name:
[cell repeats an earlier one in this file: 115 characters]


