{
"system": {
"provider": "ESENT",
"guid": "",
"event_source_name": "",
"event_id": 105,
"version": 0,
"level": 4,
"task": 1,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2022-04-07T17:04:18.422710+00:00",
"event_record_id": 214,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "WIN-FPV0DSIC9O6.lab.local",
"security": {
"user_id": ""
}
},
"event_data": {
"Data": [
"DFSRs",
"2648,D,0",
"\\\\.\\C:\\System Volume Information\\DFSR\\database_3CDA_D04B_DAD0_2D6\\dfsr.db: ",
"0",
"0",
"\n[1] 0.000907 +J(0) +M(C:0K, Fs:207, WS:804K # 804K, PF:2692K # 2592K, P:2692K)\n[2] 0.000228 +J(0) +M(C:16K, Fs:142, WS:556K # 556K, PF:4132K # 4132K, P:4132K)\n[3] 0.000013 +J(0) +M(C:0K, Fs:3, WS:12K # 12K, PF:64K # 64K, P:64K)\n[4] 0.000154 +J(0) +M(C:2032K, Fs:34, WS:128K # 128K, PF:2440K # 2440K, P:2440K)\n[5] 0.000832 +J(0) +M(C:0K, Fs:10, WS:40K # 40K, PF:24K # 24K, P:24K)\n[6] 0.003014 +J(0) +M(C:0K, Fs:21, WS:84K # 84K, PF:12K # 12K, P:12K)\n[7] 0.335559 -0.330052 (11) WT +J(0) +M(C:0K, Fs:1300, WS:5188K # 5188K, PF:5132K # 5132K, P:5132K)\n[8] -\n[9] -\n[10] -\n[11] -\n[12] -\n[13] 0.041925 -0.032647 (12) WT +J(CM:0, PgRf:0, Rd:0/0, Dy:0/0, Lg:616/1) +M(C:0K, Fs:6, WS:-5104K # 16K, PF:-5128K # 12K, P:-5128K)\n[14] 0.000023 +J(0)\n[15] 0.000092 +J(0) +M(C:0K, Fs:65, WS:256K # 0K, PF:68K # 0K, P:68K)\n[16] 0.000769 -0.000141 (1) WT +J(0) +M(C:0K, Fs:3, WS:4K # 0K, PF:0K # 0K, P:0K)."
]
},
"message": ""
}