<event timestamp="6/4/2019 4:40:32 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="6/4/2019 4:35:36 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Desktop Window Manager has registered the session port.</message></event>
<event timestamp="6/4/2019 4:21:31 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service started successfully.</message></event>
<event timestamp="6/4/2019 4:21:30 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service stopped successfully.</message></event>
<event timestamp="6/4/2019 4:21:29 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/4/2019 4:21:29 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/4/2019 4:17:52 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/4/2019 4:17:52 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/4/2019 4:13:06 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>.</message></event>
<event timestamp="6/4/2019 4:13:06 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successful auto update of third-party root list with effective date: ‎Friday, ‎May ‎17, ‎2019 12:59:03 PM.</message></event>
<event timestamp="6/4/2019 1:21:08 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/4/2019 1:21:08 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/4/2019 8:22:42 AM" level="Error" username="" host="DocuwareServer.everett.local"><message>The description for Event ID '-1073740816' in Source 'Perflib' cannot be found.  The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.  The following information is part of the event:'BITS', 'C:\Windows\System32\bitsperf.dll', '8'</message></event>
<event timestamp="6/4/2019 8:22:42 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/4/2019 8:22:42 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/4/2019 7:52:38 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Desktop Window Manager has registered the session port.</message></event>
<event timestamp="6/4/2019 3:30:43 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:56:43Z. Reason: RulesEngine.</message></event>
<event timestamp="6/4/2019 3:30:43 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="6/4/2019 3:30:13 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=devicecensus.exe</message></event>
<event timestamp="6/4/2019 3:30:13 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="6/4/2019 3:30:13 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 231267)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="6/4/2019 3:30:13 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="6/3/2019 11:12:18 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="6/3/2019 9:12:23 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket 1653216904265957704, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: DocuWare.Imaging.Worker.exe
P2: 7.0.0.8665
P3: 5cd8a1ce
P4: KernelAPI.dll
P5: 19.20.17163.100
P6: 58c606b2
P7: c0000005
P8: 0032e104
P9: 
P10: 

Attached files:
\\?\C:\Users\dwadmin\AppData\Local\Temp\WER339C.tmp.appcompat.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3776.tmp.WERInternalMetadata.xml
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_cab_04db37b2\memory.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_cab_04db37b2\triagedump.dmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_3e2cfd01

Analysis symbol: 
Rechecking for solution: 0
Report Id: 84e1deb8-c7a8-4337-9940-b6cc2a4e04ee
Report Status: 0
Hashed bucket: 2de32dda22a6663896f16803eb718148</message></event>
<event timestamp="6/3/2019 9:12:23 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket 1653216904265957704, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: DocuWare.Imaging.Worker.exe
P2: 7.0.0.8665
P3: 5cd8a1ce
P4: KernelAPI.dll
P5: 19.20.17163.100
P6: 58c606b2
P7: c0000005
P8: 0032e104
P9: 
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_3e2cfe49

Analysis symbol: 
Rechecking for solution: 0
Report Id: 927ec924-48a2-4c37-9c58-407bc2f3a78c
Report Status: 0
Hashed bucket: 2de32dda22a6663896f16803eb718148</message></event>
<event timestamp="6/3/2019 9:12:20 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: DocuWare.Imaging.Worker.exe
P2: 7.0.0.8665
P3: 5cd8a1ce
P4: KernelAPI.dll
P5: 19.20.17163.100
P6: 58c606b2
P7: c0000005
P8: 0032e104
P9: 
P10: 

Attached files:
\\?\C:\Users\dwadmin\AppData\Local\Temp\WER339C.tmp.appcompat.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3776.tmp.WERInternalMetadata.xml
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_cab_04db37b2\memory.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_cab_04db37b2\triagedump.dmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_cab_04db37b2

Analysis symbol: 
Rechecking for solution: 0
Report Id: 84e1deb8-c7a8-4337-9940-b6cc2a4e04ee
Report Status: 4
Hashed bucket:</message></event>
<event timestamp="6/3/2019 9:10:33 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket 1653216904265957704, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: DocuWare.Imaging.Worker.exe
P2: 7.0.0.8665
P3: 5cd8a1ce
P4: KernelAPI.dll
P5: 19.20.17163.100
P6: 58c606b2
P7: c0000005
P8: 0032e104
P9: 
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_0893506a

Analysis symbol: 
Rechecking for solution: 0
Report Id: 3357980e-712b-45a6-be2b-167cc592bfbb
Report Status: 0
Hashed bucket: 2de32dda22a6663896f16803eb718148</message></event>
<event timestamp="6/3/2019 9:10:32 PM" level="Error" username="" host="DocuwareServer.everett.local"><message>Application: DocuWare.Imaging.Worker.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.AccessViolationException
   at Nuance.OmniPage.CSDK.CAPI.RecAPI.kRecDetectImgSkew(Int32, IntPtr, Int32 ByRef, Nuance.OmniPage.CSDK.ArgTypes.IMG_ROTATE ByRef)
   at DocuWare.OCR.Providers.Nuance.Page.SetSkewAndRotation(DocuWare.OCR.Providers.Nuance.Settings)
   at DocuWare.OCR.Providers.Nuance.FilePage.LoadPage(DocuWare.OCR.Providers.Nuance.Settings)
   at DocuWare.OCR.Providers.Nuance.Page.RecognizeToXml(System.Drawing.Rectangle, DocuWare.OCR.Providers.Nuance.Settings, Int32 ByRef, Int32 ByRef)
   at DocuWare.OCR.Providers.Nuance.Page.TextXml(DocuWare.OCR.Services.OCRSettings)
   at DocuWare.OCR.Providers.Nuance.Provider.GetTextXml(DocuWare.OCR.Services.InputDocument, Int32, DocuWare.OCR.Services.OCRSettings)
   at DocuWare.Imaging.TextShot.OcrExtractor.GetOcrTextShot(Int32)
   at DocuWare.Imaging.TextShot.OcrExtractor.GetPageTextData(Int32, Int32)
   at DocuWare.Imaging.Server.DWImagingFileDocument.ExtractPage(Int32, DocuWare.Imaging.Decoders.FileForTextExtractionResult)
   at DocuWare.Imaging.Server.DWImagingFileDocument.GetPageData(DocuWare.Imaging.Decoders.IDecoderFileTicket, Int32, DocuWare.Imaging.PageRange, DocuWare.Imaging.Server.TextExtractionMethod)
   at DocuWare.Imaging.Server.DWImagingFileDocument.TryToOcr(DocuWare.Imaging.Decoders.IDecoderFileTicket, Int32, DocuWare.Imaging.Server.TextExtractionMethod)
   at DocuWare.Imaging.Server.DWImagingFileDocument.GetPageData(Int32, DocuWare.Imaging.PageRange)
   at DocuWare.Imaging.DWImaging.GetPageContent(System.String, Int32, DocuWare.Imaging.PageRange)
   at DocuWare.Imaging.DWImaging.GetPageContentRange(Int32, System.String, Int32, DocuWare.Imaging.PageRange)
   at DynamicClass.SyncInvokeGetPageContentRange(System.Object, System.Object[], System.Object[])
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(System.Object, System.Object[], System.Object[] ByRef)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage41(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage3(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage2(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage1(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean)
   at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(System.ServiceModel.Channels.RequestContext, Boolean, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(System.ServiceModel.Channels.RequestContext, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(System.IAsyncResult)
   at System.ServiceModel.Dispatcher.ChannelHandler.OnAsyncReceiveComplete(System.IAsyncResult)
   at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(System.IAsyncResult)
   at System.Runtime.AsyncResult.Complete(Boolean)
   at System.ServiceModel.Channels.TransportDuplexSessionChannel+TryReceiveAsyncResult.OnReceive(System.IAsyncResult)
   at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(System.IAsyncResult)
   at System.Runtime.AsyncResult.Complete(Boolean)
   at System.ServiceModel.Channels.SynchronizedMessageSource+ReceiveAsyncResult.OnReceiveComplete(System.Object)
   at System.ServiceModel.Channels.SessionConnectionReader.OnAsyncReadComplete(System.Object)
   at System.ServiceModel.Channels.PipeConnection.OnAsyncReadComplete(Boolean, Int32, Int32)
   at System.ServiceModel.Channels.OverlappedContext.CompleteCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)</message></event>
<event timestamp="6/3/2019 9:10:32 PM" level="Error" username="" host="DocuwareServer.everett.local"><message>Faulting application name: DocuWare.Imaging.Worker.exe, version: 7.0.0.8665, time stamp: 0x5cd8a1ce
Faulting module name: KernelAPI.dll, version: 19.20.17163.100, time stamp: 0x58c606b2
Exception code: 0xc0000005
Fault offset: 0x0032e104
Faulting process id: 0x1100
Faulting application start time: 0x01d51a724d6a1614
Faulting application path: E:\Program Files (x86)\DocuWare\Common\Imaging\DocuWare.Imaging.Worker.exe
Faulting module path: E:\Program Files (x86)\DocuWare\Common\OCR\KernelAPI.dll
Report Id: 927ec924-48a2-4c37-9c58-407bc2f3a78c
Faulting package full name: 
Faulting package-relative application ID:</message></event>
<event timestamp="6/3/2019 9:10:32 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: DocuWare.Imaging.Worker.exe
P2: 7.0.0.8665
P3: 5cd8a1ce
P4: KernelAPI.dll
P5: 19.20.17163.100
P6: 58c606b2
P7: c0000005
P8: 0032e104
P9: 
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_3ca74c24

Analysis symbol: 
Rechecking for solution: 0
Report Id: 927ec924-48a2-4c37-9c58-407bc2f3a78c
Report Status: 4100
Hashed bucket:</message></event>
<event timestamp="6/3/2019 9:10:30 PM" level="Error" username="" host="DocuwareServer.everett.local"><message>Faulting application name: DocuWare.Imaging.Worker.exe, version: 7.0.0.8665, time stamp: 0x5cd8a1ce
Faulting module name: KernelAPI.dll, version: 19.20.17163.100, time stamp: 0x58c606b2
Exception code: 0xc0000005
Fault offset: 0x0032e104
Faulting process id: 0x2ac8
Faulting application start time: 0x01d51a724bc7bd44
Faulting application path: E:\Program Files (x86)\DocuWare\Common\Imaging\DocuWare.Imaging.Worker.exe
Faulting module path: E:\Program Files (x86)\DocuWare\Common\OCR\KernelAPI.dll
Report Id: 3357980e-712b-45a6-be2b-167cc592bfbb
Faulting package full name: 
Faulting package-relative application ID:</message></event>
<event timestamp="6/3/2019 9:10:30 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: DocuWare.Imaging.Worker.exe
P2: 7.0.0.8665
P3: 5cd8a1ce
P4: KernelAPI.dll
P5: 19.20.17163.100
P6: 58c606b2
P7: c0000005
P8: 0032e104
P9: 
P10: 

Attached files:

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DocuWare.Imaging_a8791810781ec518d763f5ffa20d4f61093fc14_a03febbc_3caf4241

Analysis symbol: 
Rechecking for solution: 0
Report Id: 3357980e-712b-45a6-be2b-167cc592bfbb
Report Status: 4100
Hashed bucket:</message></event>
<event timestamp="6/3/2019 9:10:29 PM" level="Error" username="" host="DocuwareServer.everett.local"><message>Application: DocuWare.Imaging.Worker.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.AccessViolationException
   at Nuance.OmniPage.CSDK.CAPI.RecAPI.kRecDetectImgSkew(Int32, IntPtr, Int32 ByRef, Nuance.OmniPage.CSDK.ArgTypes.IMG_ROTATE ByRef)
   at DocuWare.OCR.Providers.Nuance.Page.SetSkewAndRotation(DocuWare.OCR.Providers.Nuance.Settings)
   at DocuWare.OCR.Providers.Nuance.FilePage.LoadPage(DocuWare.OCR.Providers.Nuance.Settings)
   at DocuWare.OCR.Providers.Nuance.Page.RecognizeToXml(System.Drawing.Rectangle, DocuWare.OCR.Providers.Nuance.Settings, Int32 ByRef, Int32 ByRef)
   at DocuWare.OCR.Providers.Nuance.Page.TextXml(DocuWare.OCR.Services.OCRSettings)
   at DocuWare.OCR.Providers.Nuance.Provider.GetTextXml(DocuWare.OCR.Services.InputDocument, Int32, DocuWare.OCR.Services.OCRSettings)
   at DocuWare.Imaging.TextShot.OcrExtractor.GetOcrTextShot(Int32)
   at DocuWare.Imaging.TextShot.OcrExtractor.GetPageTextData(Int32, Int32)
   at DocuWare.Imaging.Server.DWImagingFileDocument.ExtractPage(Int32, DocuWare.Imaging.Decoders.FileForTextExtractionResult)
   at DocuWare.Imaging.Server.DWImagingFileDocument.GetPageData(DocuWare.Imaging.Decoders.IDecoderFileTicket, Int32, DocuWare.Imaging.PageRange, DocuWare.Imaging.Server.TextExtractionMethod)
   at DocuWare.Imaging.Server.DWImagingFileDocument.TryToOcr(DocuWare.Imaging.Decoders.IDecoderFileTicket, Int32, DocuWare.Imaging.Server.TextExtractionMethod)
   at DocuWare.Imaging.Server.DWImagingFileDocument.GetPageData(Int32, DocuWare.Imaging.PageRange)
   at DocuWare.Imaging.DWImaging.GetPageContent(System.String, Int32, DocuWare.Imaging.PageRange)
   at DocuWare.Imaging.DWImaging.GetPageContentRange(Int32, System.String, Int32, DocuWare.Imaging.PageRange)
   at DynamicClass.SyncInvokeGetPageContentRange(System.Object, System.Object[], System.Object[])
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(System.Object, System.Object[], System.Object[] ByRef)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage41(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage3(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage2(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage1(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean)
   at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(System.ServiceModel.Channels.RequestContext, Boolean, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(System.ServiceModel.Channels.RequestContext, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(System.IAsyncResult)
   at System.ServiceModel.Dispatcher.ChannelHandler.OnAsyncReceiveComplete(System.IAsyncResult)
   at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(System.IAsyncResult)
   at System.Runtime.AsyncResult.Complete(Boolean)
   at System.ServiceModel.Channels.TransportDuplexSessionChannel+TryReceiveAsyncResult.OnReceive(System.IAsyncResult)
   at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(System.IAsyncResult)
   at System.Runtime.AsyncResult.Complete(Boolean)
   at System.ServiceModel.Channels.SynchronizedMessageSource+ReceiveAsyncResult.OnReceiveComplete(System.Object)
   at System.ServiceModel.Channels.SessionConnectionReader.OnAsyncReadComplete(System.Object)
   at System.ServiceModel.Channels.PipeConnection.OnAsyncReadComplete(Boolean, Int32, Int32)
   at System.ServiceModel.Channels.OverlappedContext.CompleteCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)</message></event>
<event timestamp="6/3/2019 9:10:23 PM" level="Error" username="" host="DocuwareServer.everett.local"><message>Application: DocuWare.Imaging.Worker.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.AccessViolationException
   at Nuance.OmniPage.CSDK.CAPI.RecAPI.kRecDetectImgSkew(Int32, IntPtr, Int32 ByRef, Nuance.OmniPage.CSDK.ArgTypes.IMG_ROTATE ByRef)
   at DocuWare.OCR.Providers.Nuance.Page.SetSkewAndRotation(DocuWare.OCR.Providers.Nuance.Settings)
   at DocuWare.OCR.Providers.Nuance.FilePage.LoadPage(DocuWare.OCR.Providers.Nuance.Settings)
   at DocuWare.OCR.Providers.Nuance.Page.RecognizeToXml(System.Drawing.Rectangle, DocuWare.OCR.Providers.Nuance.Settings, Int32 ByRef, Int32 ByRef)
   at DocuWare.OCR.Providers.Nuance.Page.TextXml(DocuWare.OCR.Services.OCRSettings)
   at DocuWare.OCR.Providers.Nuance.Provider.GetTextXml(DocuWare.OCR.Services.InputDocument, Int32, DocuWare.OCR.Services.OCRSettings)
   at DocuWare.Imaging.TextShot.OcrExtractor.GetOcrTextShot(Int32)
   at DocuWare.Imaging.TextShot.OcrExtractor.GetPageTextData(Int32, Int32)
   at DocuWare.Imaging.Server.DWImagingFileDocument.ExtractPage(Int32, DocuWare.Imaging.Decoders.FileForTextExtractionResult)
   at DocuWare.Imaging.Server.DWImagingFileDocument.GetPageData(DocuWare.Imaging.Decoders.IDecoderFileTicket, Int32, DocuWare.Imaging.PageRange, DocuWare.Imaging.Server.TextExtractionMethod)
   at DocuWare.Imaging.Server.DWImagingFileDocument.TryToOcr(DocuWare.Imaging.Decoders.IDecoderFileTicket, Int32, DocuWare.Imaging.Server.TextExtractionMethod)
   at DocuWare.Imaging.Server.DWImagingFileDocument.GetPageData(Int32, DocuWare.Imaging.PageRange)
   at DocuWare.Imaging.DWImaging.GetPageContent(System.String, Int32, DocuWare.Imaging.PageRange)
   at DocuWare.Imaging.DWImaging.GetPageContentRange(Int32, System.String, Int32, DocuWare.Imaging.PageRange)
   at DynamicClass.SyncInvokeGetPageContentRange(System.Object, System.Object[], System.Object[])
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(System.Object, System.Object[], System.Object[] ByRef)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage41(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage3(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage2(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage1(System.ServiceModel.Dispatcher.MessageRpc ByRef)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean)
   at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(System.ServiceModel.Channels.RequestContext, Boolean, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(System.ServiceModel.Channels.RequestContext, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(System.IAsyncResult)
   at System.ServiceModel.Dispatcher.ChannelHandler.OnAsyncReceiveComplete(System.IAsyncResult)
   at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(System.IAsyncResult)
   at System.Runtime.AsyncResult.Complete(Boolean)
   at System.ServiceModel.Channels.TransportDuplexSessionChannel+TryReceiveAsyncResult.OnReceive(System.IAsyncResult)
   at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(System.IAsyncResult)
   at System.Runtime.AsyncResult.Complete(Boolean)
   at System.ServiceModel.Channels.SynchronizedMessageSource+ReceiveAsyncResult.OnReceiveComplete(System.Object)
   at System.ServiceModel.Channels.SessionConnectionReader.OnAsyncReadComplete(System.Object)
   at System.ServiceModel.Channels.PipeConnection.OnAsyncReadComplete(Boolean, Int32, Int32)
   at System.ServiceModel.Channels.OverlappedContext.CompleteCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)</message></event>
<event timestamp="6/3/2019 9:10:23 PM" level="Error" username="" host="DocuwareServer.everett.local"><message>Faulting application name: DocuWare.Imaging.Worker.exe, version: 7.0.0.8665, time stamp: 0x5cd8a1ce
Faulting module name: KernelAPI.dll, version: 19.20.17163.100, time stamp: 0x58c606b2
Exception code: 0xc0000005
Fault offset: 0x0032e104
Faulting process id: 0x2990
Faulting application start time: 0x01d51a4a46a089fc
Faulting application path: E:\Program Files (x86)\DocuWare\Common\Imaging\DocuWare.Imaging.Worker.exe
Faulting module path: E:\Program Files (x86)\DocuWare\Common\OCR\KernelAPI.dll
Report Id: 84e1deb8-c7a8-4337-9940-b6cc2a4e04ee
Faulting package full name: 
Faulting package-relative application ID:</message></event>
<event timestamp="6/3/2019 12:24:08 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket 1252858735080981544, type 5
Event Name: RADAR_PRE_LEAK_WOW64
Response: Not available
Cab Id: 0

Problem signature:
P1: DocuWare.Imaging.Worker.exe
P2: 7.0.0.8665
P3: 10.0.14393.2.0.0
P4: 
P5: 
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
\\?\C:\Users\ricohdw\AppData\Local\Temp\RDR54B8.tmp\empty.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5536.tmp.WERInternalMetadata.xml

These files may be available here:


Analysis symbol: 
Rechecking for solution: 0
Report Id: 0191612c-861c-11e9-be20-000c295deb63
Report Status: 0
Hashed bucket: 6084accc8969a36bb1630c61b23f4428</message></event>
<event timestamp="6/3/2019 10:33:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 10:33:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 10:01:47 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service started successfully.</message></event>
<event timestamp="6/3/2019 10:01:19 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service stopped successfully.</message></event>
<event timestamp="6/3/2019 9:57:57 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 9:57:57 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 9:00:39 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 9:00:39 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 8:52:22 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Desktop Window Manager has registered the session port.</message></event>
<event timestamp="6/3/2019 8:40:01 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 8:40:01 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 7:40:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 7:40:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 6:40:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 6:40:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 6:20:08 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="6/3/2019 5:40:08 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 5:40:08 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 4:40:30 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 4:40:30 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 4:40:29 AM" level="Error" username="" host="DocuwareServer.everett.local"><message>The description for Event ID '-1073740816' in Source 'Perflib' cannot be found.  The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.  The following information is part of the event:'BITS', 'C:\Windows\System32\bitsperf.dll', '8'</message></event>
<event timestamp="6/3/2019 4:31:32 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:57:32Z. Reason: RulesEngine.</message></event>
<event timestamp="6/3/2019 4:31:32 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="6/3/2019 4:31:02 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="6/3/2019 4:31:02 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 232647)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="6/3/2019 4:31:02 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="6/3/2019 4:31:01 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=devicecensus.exe</message></event>
<event timestamp="6/3/2019 3:40:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 3:40:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 2:40:08 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 2:40:08 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 1:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 1:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/3/2019 12:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/3/2019 12:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 11:40:13 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 11:40:13 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 10:40:02 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 10:40:02 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 9:40:09 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 9:40:09 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 8:40:10 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 8:40:10 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 7:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 7:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 6:40:10 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 6:40:10 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 5:40:09 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 5:40:09 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 4:40:11 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 4:40:11 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 3:40:25 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 3:40:25 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 2:40:11 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 2:40:11 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 1:40:11 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 1:40:11 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 1:02:55 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="6/2/2019 12:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 12:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 11:40:09 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 11:40:09 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 10:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 10:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 9:40:13 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 9:40:13 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 8:40:15 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 8:40:15 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 7:40:10 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 7:40:10 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 6:40:08 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 6:40:08 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 5:40:08 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 5:40:08 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 4:40:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 4:40:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 3:40:13 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 3:40:13 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 3:40:11 AM" level="Error" username="" host="DocuwareServer.everett.local"><message>The description for Event ID '-1073740816' in Source 'Perflib' cannot be found.  The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.  The following information is part of the event:'BITS', 'C:\Windows\System32\bitsperf.dll', '8'</message></event>
<event timestamp="6/2/2019 3:06:37 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:57:37Z. Reason: RulesEngine.</message></event>
<event timestamp="6/2/2019 3:06:37 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="6/2/2019 3:06:07 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="6/2/2019 3:06:07 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 234171)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="6/2/2019 3:06:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="6/2/2019 3:06:06 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=devicecensus.exe</message></event>
<event timestamp="6/2/2019 2:40:14 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 2:40:14 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 1:40:11 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 1:40:11 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/2/2019 12:40:15 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/2/2019 12:40:15 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 11:40:15 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 11:40:15 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 10:40:13 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 10:40:13 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 9:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 9:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 8:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 8:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 7:40:34 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 7:40:34 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 7:38:43 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="6/1/2019 6:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 6:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 5:40:32 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 5:40:32 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 4:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 4:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 3:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 3:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 2:40:18 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 2:40:18 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 1:40:03 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 1:40:03 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 12:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 12:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 11:40:01 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 11:40:01 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 10:40:04 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 10:40:04 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 9:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 9:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 8:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 8:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 7:40:02 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 7:40:02 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 6:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 6:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 5:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 5:40:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 4:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 4:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 3:40:03 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 3:40:03 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 3:40:01 AM" level="Error" username="" host="DocuwareServer.everett.local"><message>The description for Event ID '-1073740816' in Source 'Perflib' cannot be found.  The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.  The following information is part of the event:'BITS', 'C:\Windows\System32\bitsperf.dll', '8'</message></event>
<event timestamp="6/1/2019 3:28:30 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:57:30Z. Reason: RulesEngine.</message></event>
<event timestamp="6/1/2019 3:28:30 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="6/1/2019 3:27:59 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=devicecensus.exe</message></event>
<event timestamp="6/1/2019 3:27:59 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="6/1/2019 3:27:59 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 235590)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="6/1/2019 3:27:59 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="6/1/2019 2:40:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 2:40:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 2:32:30 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="6/1/2019 1:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 1:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="6/1/2019 12:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="6/1/2019 12:40:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 11:40:02 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 11:40:02 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 10:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 10:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 9:40:02 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 9:40:02 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 8:40:03 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 8:40:03 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 7:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 7:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 6:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 6:40:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 5:40:03 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 5:40:03 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 4:40:10 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 4:40:10 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 4:13:04 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:57:04Z. Reason: RulesEngine.</message></event>
<event timestamp="5/31/2019 4:13:04 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="5/31/2019 4:12:34 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="5/31/2019 4:12:34 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 236265)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="5/31/2019 4:12:34 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="5/31/2019 4:12:33 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=explorer.exe</message></event>
<event timestamp="5/31/2019 3:28:28 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 3:28:28 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 2:46:29 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 2:46:29 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 2:42:36 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Desktop Window Manager has registered the session port.</message></event>
<event timestamp="5/31/2019 2:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 2:40:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 10:28:19 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="5/31/2019 9:51:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 9:51:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 9:49:12 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket 1845152859718573737, type 5
Event Name: AppHangB1
Response: Not available
Cab Id: 0

Problem signature:
P1: explorer.exe
P2: 10.0.14393.2879
P3: 5c89ec44
P4: 44ab
P5: 134217728
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
\\?\C:\Users\ricohdw\AppData\Local\Temp\WER1ED.tmp.appcompat.txt
\\?\C:\Users\ricohdw\AppData\Local\Temp\WER1FD.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BB.tmp.WERInternalMetadata.xml
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_c6a5ae6b148c3d3dfbc7625607ae43e342a6372_f1bd0d3a_cab_257002e7\memory.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_c6a5ae6b148c3d3dfbc7625607ae43e342a6372_f1bd0d3a_cab_257002e7\triagedump.dmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_explorer.exe_c6a5ae6b148c3d3dfbc7625607ae43e342a6372_f1bd0d3a_0eb47008

Analysis symbol: 
Rechecking for solution: 0
Report Id: cd9ab4fd-83aa-11e9-be20-000c295deb63
Report Status: 0
Hashed bucket: 690737d23d27aed6e99b4cbff7d25ea9</message></event>
<event timestamp="5/31/2019 9:49:11 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket , type 0
Event Name: AppHangB1
Response: Not available
Cab Id: 0

Problem signature:
P1: explorer.exe
P2: 10.0.14393.2879
P3: 5c89ec44
P4: 44ab
P5: 134217728
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
\\?\C:\Users\ricohdw\AppData\Local\Temp\WER1ED.tmp.appcompat.txt
\\?\C:\Users\ricohdw\AppData\Local\Temp\WER1FD.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BB.tmp.WERInternalMetadata.xml
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_c6a5ae6b148c3d3dfbc7625607ae43e342a6372_f1bd0d3a_cab_257002e7\memory.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_c6a5ae6b148c3d3dfbc7625607ae43e342a6372_f1bd0d3a_cab_257002e7\triagedump.dmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_c6a5ae6b148c3d3dfbc7625607ae43e342a6372_f1bd0d3a_cab_257002e7

Analysis symbol: 
Rechecking for solution: 0
Report Id: cd9ab4fd-83aa-11e9-be20-000c295deb63
Report Status: 4
Hashed bucket:</message></event>
<event timestamp="5/31/2019 9:49:11 AM" level="Error" username="" host="DocuwareServer.everett.local"><message>The program explorer.exe version 10.0.14393.2879 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 189c

Start Time: 01d517b712051ba6

Termination Time: 0

Application Path: C:\Windows\explorer.exe

Report Id: cd9ab4fd-83aa-11e9-be20-000c295deb63

Faulting package full name: 

Faulting package-relative application ID:</message></event>
<event timestamp="5/31/2019 9:46:05 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket 2216896191834618250, type 5
Event Name: AppHangB1
Response: Not available
Cab Id: 0

Problem signature:
P1: explorer.exe
P2: 10.0.14393.2879
P3: 5c89ec44
P4: 117e
P5: 134217728
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
\\?\C:\Users\ricohdw\AppData\Local\Temp\WERC3D9.tmp.appcompat.txt
\\?\C:\Users\ricohdw\AppData\Local\Temp\WERC437.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC5B0.tmp.WERInternalMetadata.xml
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_2c49a6b42dd0d3b2925c3e28c9251a7df2c4f6c_f1bd0d3a_cab_00a4c60b\memory.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_2c49a6b42dd0d3b2925c3e28c9251a7df2c4f6c_f1bd0d3a_cab_00a4c60b\triagedump.dmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_explorer.exe_2c49a6b42dd0d3b2925c3e28c9251a7df2c4f6c_f1bd0d3a_1f8d93db

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4edd3a8d-83aa-11e9-be20-000c295deb63
Report Status: 0
Hashed bucket: bf80a4f48d623ffc2ec3ff574237f98a</message></event>
<event timestamp="5/31/2019 9:46:04 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket , type 0
Event Name: AppHangB1
Response: Not available
Cab Id: 0

Problem signature:
P1: explorer.exe
P2: 10.0.14393.2879
P3: 5c89ec44
P4: 117e
P5: 134217728
P6: 
P7: 
P8: 
P9: 
P10: 

Attached files:
\\?\C:\Users\ricohdw\AppData\Local\Temp\WERC3D9.tmp.appcompat.txt
\\?\C:\Users\ricohdw\AppData\Local\Temp\WERC437.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC5B0.tmp.WERInternalMetadata.xml
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_2c49a6b42dd0d3b2925c3e28c9251a7df2c4f6c_f1bd0d3a_cab_00a4c60b\memory.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_2c49a6b42dd0d3b2925c3e28c9251a7df2c4f6c_f1bd0d3a_cab_00a4c60b\triagedump.dmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_explorer.exe_2c49a6b42dd0d3b2925c3e28c9251a7df2c4f6c_f1bd0d3a_cab_00a4c60b

Analysis symbol: 
Rechecking for solution: 0
Report Id: 4edd3a8d-83aa-11e9-be20-000c295deb63
Report Status: 4
Hashed bucket:</message></event>
<event timestamp="5/31/2019 9:46:04 AM" level="Error" username="" host="DocuwareServer.everett.local"><message>The program explorer.exe version 10.0.14393.2879 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 20ec

Start Time: 01d517adad741ab1

Termination Time: 0

Application Path: C:\Windows\explorer.exe

Report Id: 4edd3a8d-83aa-11e9-be20-000c295deb63

Faulting package full name: 

Faulting package-relative application ID:</message></event>
<event timestamp="5/31/2019 9:40:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 9:40:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 8:40:24 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 8:40:24 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 8:40:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 8:40:12 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 8:37:53 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Desktop Window Manager has registered the session port.</message></event>
<event timestamp="5/31/2019 3:27:20 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:57:20Z. Reason: RulesEngine.</message></event>
<event timestamp="5/31/2019 3:27:20 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="5/31/2019 3:26:50 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=CompatTelRunner.exe</message></event>
<event timestamp="5/31/2019 3:26:50 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="5/31/2019 3:26:50 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 237031)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="5/31/2019 3:26:50 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="5/31/2019 3:26:04 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>svchost (272) DS_Token_DB: The database engine (10.00.14393.0000) is starting a new instance (1).</message></event>
<event timestamp="5/31/2019 3:26:04 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>svchost (272) DS_Token_DB: The database engine is initiating recovery steps.</message></event>
<event timestamp="5/31/2019 3:26:04 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>svchost (272) DS_Token_DB: The database engine has begun replaying logfile C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.log.</message></event>
<event timestamp="5/31/2019 3:26:04 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>svchost (272) DS_Token_DB: The database engine has successfully completed recovery steps.</message></event>
<event timestamp="5/31/2019 3:26:04 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>svchost (272) DS_Token_DB: The database engine started a new instance (1). (Time=0 seconds)



Internal Timing Sequence: [1] 0.015, [2] 0.000, [3] 0.032, [4] 0.000, [5] 0.047, [6] 0.062, [7] 0.031, [8] 0.000, [9] 0.000, [10] 0.000.</message></event>
<event timestamp="5/31/2019 3:26:04 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>svchost (272) DS_Token_DB: The database engine attached a database (2, C:\Windows\system32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat). (Time=0 seconds)



Internal Timing Sequence: [1] 0.000, [2] 0.000, [3] 0.015, [4] 0.000, [5] 0.000, [6] 0.016, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.

Saved Cache: 1 0</message></event>
<event timestamp="5/31/2019 3:20:44 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:56:44Z. Reason: RulesEngine.</message></event>
<event timestamp="5/31/2019 3:20:44 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="5/31/2019 3:20:38 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.</message></event>
<event timestamp="5/31/2019 3:20:37 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.</message></event>
<event timestamp="5/31/2019 3:20:13 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=devicecensus.exe</message></event>
<event timestamp="5/31/2019 3:20:13 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="5/31/2019 3:20:13 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 237037)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="5/31/2019 3:20:13 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="5/31/2019 3:19:37 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 3:19:37 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 3:19:10 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The VSS service is shutting down due to idle timeout.</message></event>
<event timestamp="5/31/2019 3:19:04 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Fault bucket , type 0
Event Name: WindowsUpdateFailure3
Response: Not available
Cab Id: 0

Problem signature:
P1: 10.0.14393.2879
P2: 8024001e
P3: DACCF1E9-E175-4964-8AF9-F594F5522783
P4: Install
P5: 200
P6: 0
P7: 8024000b
P8: UpdateOrchestrator
P9: {7971F918-A847-4430-9279-4A52D1EFE18D}
P10: 0

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER53D0.tmp.WERInternalMetadata.xml

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_10.0.14393.2879_8b3ccc1c939deed6318109dff656eb6ca7947e1_00000000_1bff3f0e

Analysis symbol: 
Rechecking for solution: 0
Report Id: d17e73b6-8373-11e9-be1f-000c295deb63
Report Status: 8192
Hashed bucket:</message></event>
<event timestamp="5/31/2019 3:18:52 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 3:18:52 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 3:18:47 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:56:47Z. Reason: RulesEngine.</message></event>
<event timestamp="5/31/2019 3:18:47 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="5/31/2019 3:18:17 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="5/31/2019 3:18:17 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 237039)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="5/31/2019 3:18:17 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="5/31/2019 3:18:16 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:<none></message></event>
<event timestamp="5/31/2019 3:16:33 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 3:16:33 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 3:16:32 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>NotificationServer::Service started!</message></event>
<event timestamp="5/31/2019 3:16:32 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service started successfully.</message></event>
<event timestamp="5/31/2019 3:16:31 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>ProcessServer::Service started!</message></event>
<event timestamp="5/31/2019 3:16:31 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service started successfully.</message></event>
<event timestamp="5/31/2019 3:16:30 AM" level="Error" username="" host="DocuwareServer.everett.local"><message>The description for Event ID '-1073740816' in Source 'Perflib' cannot be found.  The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.  The following information is part of the event:'BITS', 'C:\Windows\System32\bitsperf.dll', '8'</message></event>
<event timestamp="5/31/2019 3:16:27 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>AuthenticationServer::Service started!</message></event>
<event timestamp="5/31/2019 3:16:27 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service started successfully.</message></event>
<event timestamp="5/31/2019 3:16:26 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>NotificationServer::Starting service attempt 1 ...</message></event>
<event timestamp="5/31/2019 3:16:25 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>ProcessServer::Starting service attempt 1 ...</message></event>
<event timestamp="5/31/2019 3:16:21 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Message Queuing found multiple IP addresses for the local computer. Message Queuing will use the default IP address determined by the PGM driver for multicast messages. To use a different IP address, set the \HKLM\Software\Microsoft\MSMQ\Parameters\MulticastBindIP registry value to one of the following valid IP addresses: :.</message></event>
<event timestamp="5/31/2019 3:16:19 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>ProcessServer::Error: Cannot find active authentication server. All servers are either stopped or the communication channel settings don't allow a connection.   at DocuWare.Communication.AuthenticationServer.Config.ASClient.FindNextAuthenticationServerUrl(Int32 context, Exception ex)
   at DocuWare.Communication.AuthenticationServer.Config.ASClient.GetServerProxy(String url, Func`3 nextUrl, Int32 context)
   at DocuWare.Communication.AuthenticationServer.Config.ASClient.get_AuthenticationServer()
   at DocuWare.Communication.Server.Server.LogIn(ServerID sId)
   at DocuWare.Communication.Server.Server.Start(InternalServerSettings internalSettings, Boolean saveSettings)
   at DocuWare.Communication.AuthenticationServer.Management.Managers.ProcessServerManager.Start()
   at DocuWare.Communication.AuthenticationServer.Management.ServerManagement.StartServer()</message></event>
<event timestamp="5/31/2019 3:16:19 AM" level="Error" username="" host="DocuwareServer.everett.local"><message>DW NotificationServer will not start : >Message:Cannot find active authentication server. All servers are either stopped or the communication channel settings don't allow a connection.
>Type:DocuWare.Communication.AuthenticationServer.Exceptions.DWAuthenticateException
>Source:DocuWare.Communication.AuthenticationServer
>Stack Trace:   at DocuWare.Communication.AuthenticationServer.Config.ASClient.FindNextAuthenticationServerUrl(Int32 context, Exception ex)
   at DocuWare.Communication.AuthenticationServer.Config.ASClient.GetServerProxy(String url, Func`3 nextUrl, Int32 context)
   at DocuWare.Communication.AuthenticationServer.Config.ASClient.get_AuthenticationServer()
   at DocuWare.Communication.Server.Server.LogIn(ServerID sId)
   at DocuWare.Communication.Server.Server.Start(InternalServerSettings internalSettings, Boolean saveSettings)
   at DocuWare.Communication.AuthenticationServer.Management.Managers.GenericServerManager.Start()
   at DocuWare.Communication.AuthenticationServer.Management.Managers.NotificationServerManager.Start()
>nInnerException:>Message:Cannot access server url  'gtcp://localhost:9000' . Check that server is accessible and use compatible communication options
>Type:DocuWare.Common.Exceptions.DWRemotingException
>Source:mscorlib
>Stack Trace:
Server stack trace: 
   at DocuWare.Remoting.SwitchChannel.SwitchClientChannelSink.ProcessMessage(IMessage msg, ITransportHeaders requestHeaders, Stream requestStream, ITransportHeaders& responseHeaders, Stream& responseStream)
   at Zyan.SafeDeserializationHelpers.Channels.SafeBinaryClientFormatterSink.SyncProcessMessage(IMessage msg)

Exception rethrown at [0]: 
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at DocuWare.XChange.IServer.Responce()
   at DocuWare.Communication.AuthenticationServer.Config.ASClient.CreateServerProxy(String url)
   at DocuWare.Communication.AuthenticationServer.Config.ASClient.GetServerProxy(String url, Func`3 nextUrl, Int32 context)
>nInnerException:>Message:Can not connect to the remote host "gtcp://localhost:9000". System error message: No connection could be made because the target machine actively refused it 127.0.0.1:9000.
>Type:Belikov.GenuineChannels.GenuineExceptions+CanNotConnectToRemoteHost
>Source:GenuineChannels
>Stack Trace:   at Belikov.GenuineChannels.GenuineTcp.TcpConnectionManager.LowLevel_OpenConnection(HostInformation remote, GenuineConnectionType genuineConnectionType, String localUri, Int32 localPort, String connectionName, String& remoteUri, Int32& remoteHostUniqueIdentifier)
   at Belikov.GenuineChannels.GenuineTcp.TcpConnectionManager.GetConnectionForSending(Message message)
   at Belikov.GenuineChannels.GenuineTcp.TcpConnectionManager.InternalSend(Message message)
   at Belikov.GenuineChannels.Connection.ConnectionManager.Send(Message message)
   at Belikov.GenuineChannels.DotNetRemotingLayer.GenuineTcpClientTransportSink.ProcessMessage(IMessage msg, ITransportHeaders requestHeaders, Stream requestStream, ITransportHeaders& responseHeaders, Stream& responseStream)
   at DocuWare.Remoting.SwitchChannel.FakeClientChannelSink.ProcessMessage(IMessage msg, ITransportHeaders requestHeaders, Stream requestStream, ITransportHeaders& responseHeaders, Stream& responseStream)
   at DocuWare.Remoting.SwitchChannel.SwitchClientChannelSink.ProcessMessage(IMessage msg, ITransportHeaders requestHeaders, Stream requestStream, ITransportHeaders& responseHeaders, Stream& responseStream)</message></event>
<event timestamp="5/31/2019 3:16:19 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>NotificationServer::Error: Cannot find active authentication server. All servers are either stopped or the communication channel settings don't allow a connection.   at DocuWare.Communication.AuthenticationServer.Config.ASClient.FindNextAuthenticationServerUrl(Int32 context, Exception ex)
   at DocuWare.Communication.AuthenticationServer.Config.ASClient.GetServerProxy(String url, Func`3 nextUrl, Int32 context)
   at DocuWare.Communication.AuthenticationServer.Config.ASClient.get_AuthenticationServer()
   at DocuWare.Communication.Server.Server.LogIn(ServerID sId)
   at DocuWare.Communication.Server.Server.Start(InternalServerSettings internalSettings, Boolean saveSettings)
   at DocuWare.Communication.AuthenticationServer.Management.Managers.GenericServerManager.Start()
   at DocuWare.Communication.AuthenticationServer.Management.Managers.NotificationServerManager.Start()
   at DocuWare.Communication.AuthenticationServer.Management.ServerManagement.StartServer()</message></event>
<event timestamp="5/31/2019 3:16:14 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>ProcessServer::Starting service attempt 0 ...</message></event>
<event timestamp="5/31/2019 3:16:14 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>AuthenticationServer::Starting service attempt 0 ...</message></event>
<event timestamp="5/31/2019 3:16:14 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>NotificationServer::Starting service attempt 0 ...</message></event>
<event timestamp="5/31/2019 3:16:14 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service started successfully.</message></event>
<event timestamp="5/31/2019 3:16:14 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service started successfully.</message></event>
<event timestamp="5/31/2019 3:16:08 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Restored network configuration.</message></event>
<event timestamp="5/31/2019 3:16:07 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Restoring network configuration.</message></event>
<event timestamp="5/31/2019 3:16:07 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The description for Event ID '1073746026' in Source 'MSDTC 2' cannot be found.  The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.  The following information is part of the event:'0', '0', '0', '0', '0', '0', '1', 'Mutual Authentication Required', 'NT AUTHORITY\NetworkService', '0', '0', '1'</message></event>
<event timestamp="5/31/2019 3:16:05 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The description for Event ID '1073742605' in Source 'COM+' cannot be found.  The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.  The following information is part of the event:'86400', 'SuppressDuplicateDuration', 'Software\Microsoft\COM3\Eventlog'</message></event>
<event timestamp="5/31/2019 3:16:05 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>Windows Management Instrumentation Service subsystems initialized successfully</message></event>
<event timestamp="5/31/2019 3:16:03 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Message Queuing service started.</message></event>
<event timestamp="5/31/2019 3:16:00 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The service was started.</message></event>
<event timestamp="5/31/2019 3:15:58 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>Windows Management Instrumentation Service started sucessfully</message></event>
<event timestamp="5/31/2019 3:15:57 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>The User Profile Service has started successfully.</message></event>
<event timestamp="5/31/2019 3:15:56 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The description for Event ID '1073746449' in Source 'EventSystem' cannot be found.  The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.  The following information is part of the event:'86400', 'SuppressDuplicateDuration', 'Software\Microsoft\EventSystem\EventLog'</message></event>
<event timestamp="5/31/2019 3:15:08 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>The User Profile Service has stopped.</message></event>
<event timestamp="5/31/2019 3:15:07 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service has been successfully shut down.</message></event>
<event timestamp="5/31/2019 3:15:07 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service has been successfully shut down.</message></event>
<event timestamp="5/31/2019 3:15:07 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service has been successfully shut down.</message></event>
<event timestamp="5/31/2019 3:15:07 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service has been successfully shut down.</message></event>
<event timestamp="5/31/2019 3:15:07 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service has been successfully shut down.</message></event>
<event timestamp="5/31/2019 3:15:05 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Saving network configuration.</message></event>
<event timestamp="5/31/2019 3:15:05 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Saved network configuration.</message></event>
<event timestamp="5/31/2019 3:15:05 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The service was stopped.</message></event>
<event timestamp="5/31/2019 3:14:08 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.  

 DETAIL - 
 26 user registry handles leaked from \Registry\User\S-1-5-21-2059808563-246285904-317593308-10399:
Process 1368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399
Process 744 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\System\GameConfigStore\Parents
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\CommsAPHost\Test
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\CommsAPHost\Test
Process 744 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\System\GameConfigStore
Process 996 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Process 88 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 2012 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Process 2012 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Policies\Microsoft\Windows\DataCollection
Process 88 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 2012 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 88 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Internet Explorer\Main
Process 2012 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Internet Explorer\Main
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Internet Explorer\Main
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\ActiveSync\JobDispatcher\JobRegistry\1.1
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\ActiveSync\Partners
Process 996 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\Printers\DevModePerUser
Process 744 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\System\GameConfigStore\Children
Process 88 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Internet Explorer\Security
Process 2012 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Internet Explorer\Security
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Internet Explorer\Security
Process 1368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections</message></event>
<event timestamp="5/31/2019 3:14:08 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.  

 DETAIL - 
 2 user registry handles leaked from \Registry\User\S-1-5-21-2059808563-246285904-317593308-10399_Classes:
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399_Classes
Process 2368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-10399_Classes</message></event>
<event timestamp="5/31/2019 3:14:08 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.  

 DETAIL - 
 8 user registry handles leaked from \Registry\User\S-1-5-21-2059808563-246285904-317593308-3641:
Process 1368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641
Process 744 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641\System\GameConfigStore\Parents
Process 744 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641\System\GameConfigStore
Process 996 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Process 2012 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641\SOFTWARE\Policies\Microsoft\Windows\DataCollection
Process 9856 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641\SOFTWARE\Microsoft\ActiveSync\Partners
Process 744 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641\System\GameConfigStore\Children
Process 1368 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections</message></event>
<event timestamp="5/31/2019 3:14:08 AM" level="Information" username="NT AUTHORITY\SYSTEM" host="DocuwareServer.everett.local"><message>Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required.  

 DETAIL - 
 2 user registry handles leaked from \Registry\User\S-1-5-21-2059808563-246285904-317593308-3641_Classes:
Process 9856 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641_Classes
Process 9856 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-2059808563-246285904-317593308-3641_Classes</message></event>
<event timestamp="5/31/2019 3:14:07 AM" level="Warning" username="" host="DocuwareServer.everett.local"><message>The winlogon notification subscriber <Sens> failed a notification event.</message></event>
<event timestamp="5/31/2019 3:14:07 AM" level="Warning" username="" host="DocuwareServer.everett.local"><message>The winlogon notification subscriber <Sens> failed a notification event.</message></event>
<event timestamp="5/31/2019 3:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 3:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 2:12:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 2:12:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 1:12:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 1:12:07 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/31/2019 12:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/31/2019 12:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 11:12:07 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 11:12:07 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 10:12:07 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 10:12:07 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 9:12:11 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 9:12:11 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 8:26:07 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:57:06Z. Reason: RulesEngine.</message></event>
<event timestamp="5/30/2019 8:26:07 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="5/30/2019 8:25:36 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="5/30/2019 8:25:36 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 237452)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="5/30/2019 8:25:36 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="5/30/2019 8:25:35 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=CompatTelRunner.exe</message></event>
<event timestamp="5/30/2019 6:10:37 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="5/30/2019 4:20:42 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Desktop Window Manager has registered the session port.</message></event>
<event timestamp="5/30/2019 2:25:15 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 2:25:15 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 2:12:07 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 2:12:07 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 1:39:19 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Desktop Window Manager has registered the session port.</message></event>
<event timestamp="5/30/2019 1:12:06 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 1:12:06 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 12:12:06 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 12:12:06 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 11:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 11:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 10:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 10:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 9:12:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 9:12:05 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 8:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 8:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 8:07:09 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Desktop Window Manager has registered the session port.</message></event>
<event timestamp="5/30/2019 7:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 7:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 6:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 6:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 5:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 5:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 4:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 4:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 3:24:34 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:57:34Z. Reason: RulesEngine.</message></event>
<event timestamp="5/30/2019 3:24:34 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="5/30/2019 3:24:04 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 238474)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="5/30/2019 3:24:04 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="5/30/2019 3:24:03 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="5/30/2019 3:24:02 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=devicecensus.exe</message></event>
<event timestamp="5/30/2019 3:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 3:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 2:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 2:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 1:36:30 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="5/30/2019 1:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 1:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/30/2019 12:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/30/2019 12:12:06 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/29/2019 11:12:06 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/29/2019 11:12:06 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/29/2019 10:12:06 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/29/2019 10:12:06 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/29/2019 9:12:07 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/29/2019 9:12:07 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/29/2019 8:12:09 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/29/2019 8:12:09 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/29/2019 7:12:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/29/2019 7:12:12 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/29/2019 1:53:32 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/29/2019 1:53:32 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/29/2019 12:23:41 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:57:41Z. Reason: RulesEngine.</message></event>
<event timestamp="5/29/2019 12:23:41 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="5/29/2019 12:23:11 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="5/29/2019 12:23:10 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=CompatTelRunner.exe</message></event>
<event timestamp="5/29/2019 12:23:10 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="5/29/2019 12:23:10 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 239374)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
<event timestamp="5/29/2019 12:18:05 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service started successfully.</message></event>
<event timestamp="5/29/2019 12:18:01 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmGuestLibrary" is successfully initialized for this Virtual Machine.</message></event>
<event timestamp="5/29/2019 12:18:01 PM" level="0" username="" host="DocuwareServer.everett.local"><message>The "vmStatsProvider" is successfully initialized for this Virtual Machine.
WMI namespace: "root\cimv2".</message></event>
<event timestamp="5/29/2019 12:18:01 PM" level="Information" username="" host="DocuwareServer.everett.local"><message>Service stopped successfully.</message></event>
<event timestamp="5/29/2019 9:26:18 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Desktop Window Manager has registered the session port.</message></event>
<event timestamp="5/29/2019 7:50:23 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Security policy in the Group policy objects has been applied successfully.</message></event>
<event timestamp="5/29/2019 4:12:26 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Successfully scheduled Software Protection service for re-start at 2019-06-14T21:57:26Z. Reason: RulesEngine.</message></event>
<event timestamp="5/29/2019 4:12:26 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has stopped.</message></event>
<event timestamp="5/29/2019 4:11:56 AM" level="0" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has started.
10.0.14393.2879</message></event>
<event timestamp="5/29/2019 4:11:55 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service is starting.
Parameters:caller=devicecensus.exe</message></event>
<event timestamp="5/29/2019 4:11:55 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>Initialization status for service objects.
C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000
C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000</message></event>
<event timestamp="5/29/2019 4:11:55 AM" level="Information" username="" host="DocuwareServer.everett.local"><message>The Software Protection service has completed licensing status check.
Application Id=55c92734-d682-4d71-983e-d6ec3f16059f
Licensing Status=
1: 179bbfdb-3b18-4fa6-af8f-86f740f28fef, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
2: 2e7a9ad1-a849-4b56-babe-17d5a29fe4b4, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
3: 3c006fa7-3b03-45a4-93da-63ddc1bdce11, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
4: 3c2da9a5-1c6e-45d1-855f-fdbef536676f, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
5: 60d99e35-ba21-46e5-abf9-877d5dd815de, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
6: 8c1c5410-9f39-4805-8c9d-63a07706358f, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/volume/1.0 0x4004F040 239866)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]
7: 9db83b52-9904-4326-8957-ebe6feedf37c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
8: a2ae7054-d580-4c06-a79b-1662e6f6955c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
9: afd55ac6-d0b0-4812-9047-6c756d82bedf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
10: c0b765fd-6e2e-42f9-80d7-4a7ca0d118cf, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
11: d6992aac-29e7-452a-bf10-bbfb8ccabe59, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
12: f3d100a3-7544-4580-be0b-88d452b4a881, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]
13: f70cf82b-0a95-4f14-a0a9-cb968d337962, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]</message></event>
