GIF89a; %PDF-1.5 %���� ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY Donat Was Here
DonatShell
Server IP : 134.29.175.74  /  Your IP : 216.73.216.160
Web Server : nginx/1.10.2
System : Windows NT CST-WEBSERVER 10.0 build 19045 (Windows 10) i586
User : Administrator ( 0)
PHP Version : 7.1.0
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /ProgramData/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : /ProgramData/NVDisplayContainerWatchdog.log
#0(I)[2021-01-13 23:44:23,592]{00000588}<NvpChildGroup>    Add watchdog for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session - 'C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe' : '-f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session' : 10/300/5 : elevated : '' 
#1(I)[2021-01-13 23:44:23,592]{00000588}<DirectoryListene> Adding directory C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session.
#2(D)[2021-01-13 23:44:23,592]{00000588}<DirectoryListene> Total number of current directories is 1.
#3(D)[2021-01-13 23:44:23,592]{00000764}<DirectoryListene> Directory change listener thread started
#4(D)[2021-01-13 23:44:23,592]{00000588}<DirectoryListene> Directory listener thread started.
#5(D)[2021-01-13 23:44:23,858]{000007F8}<NvpWatchdog>      Skip session 1 - 'Console' in state 2
#6(I)[2021-01-13 23:44:23,858]{000007F8}<NvpWatchdog>      Running sessions = 0, user sessions = 0 & service session
#7(D)[2021-01-13 23:44:23,858]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-13 23:44:23,858]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>    Group =>
#0(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#2(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#3(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>        Processes =>
#4(D)[2021-01-13 23:44:23,858]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-13 23:44:23,858]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2021-01-13 23:44:23,858]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(D)[2021-01-13 23:44:23,858]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>    Group =>
#9(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#1(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#2(D)[2021-01-13 23:44:23,858]{000007F8}<NvpChildGroup>        Processes =>
#3(D)[2021-01-13 23:44:23,858]{000007F8}<NvpWatchdog>      Wait for 3 handles. Timeout = 4294967295
#4(I)[2021-01-13 23:45:25,842]{00000588}<NvpWatchdog>      Session 1 event 1: Console Connect
#5(I)[2021-01-13 23:45:25,842]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#6(I)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>      Session event was signaled
#7(I)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#8(D)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#9(I)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>      Running sessions = 1, user sessions = 0 & service session
#0(I)[2021-01-13 23:45:25,842]{00000588}<NvpWatchdog>      Session 1 event 1: Console Connect
#1(I)[2021-01-13 23:45:25,842]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#2(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(I)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(I)[2021-01-13 23:45:25,842]{000007F8}<NvpChildProcess>  Run container for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session in session 1
#3(I)[2021-01-13 23:45:25,842]{000007F8}<NvpChildProcess>  Use quit event 'Global\NvContainer1412-session1-c:_windows_system32_driverstore_filerepository_nv_dispi.inf_amd64_90685a092bcf58c7_display.nvcontainer_plugins_session' (error = 0) for elevated container 'C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session'
#4(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>    Group =>
#7(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#8(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#9(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#0(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Processes =>
#1(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#2(D)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>      Wait for 4 handles. Timeout = 4294967295
#3(I)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#5(D)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#6(I)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>      Running sessions = 1, user sessions = 0 & service session
#7(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>    Group =>
#0(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#2(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#3(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Processes =>
#4(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#5(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(I)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#8(I)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#9(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-13 23:45:25,842]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>    Group =>
#2(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildGroup>        Processes =>
#6(D)[2021-01-13 23:45:25,842]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#7(D)[2021-01-13 23:45:25,842]{000007F8}<NvpWatchdog>      Wait for 4 handles. Timeout = 4294967295
#8(I)[2021-01-16 07:59:26,839]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#9(I)[2021-01-16 07:59:26,839]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#0(I)[2021-01-16 07:59:26,839]{000007F8}<NvpWatchdog>      Session event was signaled
#1(I)[2021-01-16 07:59:26,839]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-16 07:59:26,839]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#3(I)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#2'
#5(D)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#6(I)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 0 & service session
#7(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>    Group =>
#0(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#2(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#3(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Processes =>
#4(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#5(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(I)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#8(I)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#9(I)[2021-01-16 07:59:26,855]{000007F8}<NvpChildProcess>  Run container for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session in session 2
#0(I)[2021-01-16 07:59:26,855]{000007F8}<NvpChildProcess>  Use quit event 'Global\NvContainer1412-session2-c:_windows_system32_driverstore_filerepository_nv_dispi.inf_amd64_90685a092bcf58c7_display.nvcontainer_plugins_session' (error = 0) for elevated container 'C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session'
#1(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>    Group =>
#4(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#5(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#6(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#7(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Processes =>
#8(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#9(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#0(D)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#1(I)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#3(I)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#2'
#4(D)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#5(I)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 0 & service session
#6(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>    Group =>
#9(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#1(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#2(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Processes =>
#3(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#4(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#5(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(I)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#8(I)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#9(I)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#0(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-16 07:59:26,855]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>    Group =>
#3(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#4(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#5(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#6(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildGroup>        Processes =>
#7(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#8(D)[2021-01-16 07:59:26,855]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#9(D)[2021-01-16 07:59:26,855]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#0(I)[2021-01-16 07:59:27,745]{00000588}<NvpWatchdog>      Session 2 event 5: Logon
#1(I)[2021-01-16 07:59:27,745]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#2(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>      Session event was signaled
#3(I)[2021-01-16 07:59:27,745]{00000588}<NvpWatchdog>      Session 2 event 5: Logon
#4(I)[2021-01-16 07:59:27,745]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#5(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#6(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#2'
#7(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#2'
#8(D)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#9(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#0(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Group =>
#3(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#4(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#5(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#6(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Processes =>
#7(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#8(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#9(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(I)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(I)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#3(I)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#4(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Group =>
#7(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#8(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#9(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#0(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Processes =>
#1(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#2(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#3(D)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#4(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>      Session event was signaled
#5(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#6(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#2'
#7(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#2'
#8(D)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#9(I)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#0(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Group =>
#3(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#4(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#5(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#6(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Processes =>
#7(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#8(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#9(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(I)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(I)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#3(I)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#4(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-16 07:59:27,745]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>    Group =>
#7(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#8(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#9(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#0(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildGroup>        Processes =>
#1(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#2(D)[2021-01-16 07:59:27,745]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#3(D)[2021-01-16 07:59:27,745]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#4(I)[2021-01-16 08:04:31,932]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#5(I)[2021-01-16 08:04:31,932]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-16 08:04:32,041]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#7(I)[2021-01-16 08:04:32,041]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-19 01:38:54,076]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#9(I)[2021-01-19 01:38:54,076]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#0(I)[2021-01-19 01:38:54,076]{000007F8}<NvpWatchdog>      Session event was signaled
#1(I)[2021-01-19 01:38:54,076]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-19 01:38:54,076]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#3(I)[2021-01-19 01:38:54,107]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-19 01:38:54,169]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#4'
#5(I)[2021-01-19 01:38:54,169]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#4'
#6(D)[2021-01-19 01:38:54,169]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2021-01-19 01:38:54,169]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#8(D)[2021-01-19 01:38:54,169]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-19 01:38:54,169]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>    Group =>
#1(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>        Processes =>
#5(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#6(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#7(D)[2021-01-19 01:38:54,169]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-19 01:38:54,169]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(I)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(I)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#1(I)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#2(D)[2021-01-19 01:38:54,169]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-19 01:38:54,169]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#0(D)[2021-01-19 01:38:54,169]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#1(D)[2021-01-19 01:38:54,169]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2021-01-19 01:38:54,169]{000007F8}<NvpWatchdog>      Session event was signaled
#3(I)[2021-01-19 01:38:54,185]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-19 01:38:54,216]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#4'
#5(I)[2021-01-19 01:38:54,216]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#4'
#6(D)[2021-01-19 01:38:54,216]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2021-01-19 01:38:54,216]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#8(D)[2021-01-19 01:38:54,216]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-19 01:38:54,216]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>    Group =>
#1(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>        Processes =>
#5(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#6(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#7(D)[2021-01-19 01:38:54,216]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-19 01:38:54,216]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(I)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(I)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#1(I)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#2(D)[2021-01-19 01:38:54,216]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-19 01:38:54,216]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#0(D)[2021-01-19 01:38:54,216]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#1(D)[2021-01-19 01:38:54,216]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2021-01-19 01:38:54,482]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#3(I)[2021-01-19 01:38:54,482]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-19 06:48:48,506]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#5(I)[2021-01-19 06:48:48,506]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-19 06:48:48,568]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#7(I)[2021-01-19 06:48:48,568]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-19 07:33:14,273]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#9(I)[2021-01-19 07:33:14,273]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#0(I)[2021-01-19 07:33:14,273]{000007F8}<NvpWatchdog>      Session event was signaled
#1(I)[2021-01-19 07:33:14,273]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-19 07:33:14,273]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#3(I)[2021-01-19 07:33:14,304]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-19 07:33:14,429]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#6'
#5(I)[2021-01-19 07:33:14,429]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#6'
#6(D)[2021-01-19 07:33:14,429]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2021-01-19 07:33:14,429]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#8(D)[2021-01-19 07:33:14,429]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-19 07:33:14,429]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>    Group =>
#1(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>        Processes =>
#5(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#6(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#7(D)[2021-01-19 07:33:14,429]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-19 07:33:14,429]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(I)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(I)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#1(I)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#2(D)[2021-01-19 07:33:14,429]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-19 07:33:14,429]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#0(D)[2021-01-19 07:33:14,429]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#1(D)[2021-01-19 07:33:14,429]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2021-01-19 07:33:14,429]{000007F8}<NvpWatchdog>      Session event was signaled
#3(I)[2021-01-19 07:33:14,445]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-19 07:33:14,476]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#6'
#5(I)[2021-01-19 07:33:14,476]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#6'
#6(D)[2021-01-19 07:33:14,476]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2021-01-19 07:33:14,476]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#8(D)[2021-01-19 07:33:14,476]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-19 07:33:14,476]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>    Group =>
#1(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>        Processes =>
#5(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#6(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#7(D)[2021-01-19 07:33:14,476]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-19 07:33:14,476]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(I)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(I)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#1(I)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#2(D)[2021-01-19 07:33:14,476]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-19 07:33:14,476]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#0(D)[2021-01-19 07:33:14,476]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#1(D)[2021-01-19 07:33:14,476]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2021-01-19 07:33:14,633]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#3(I)[2021-01-19 07:33:14,633]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-19 07:42:16,084]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#5(I)[2021-01-19 07:42:16,084]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-19 07:42:16,163]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#7(I)[2021-01-19 07:42:16,163]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-22 05:45:11,826]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#9(I)[2021-01-22 05:45:11,826]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#0(I)[2021-01-22 05:45:11,826]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#1(I)[2021-01-22 05:45:11,826]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#2(I)[2021-01-22 05:45:11,826]{000007F8}<NvpWatchdog>      Session event was signaled
#3(I)[2021-01-22 05:45:11,857]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-22 05:45:11,936]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#8'
#5(I)[2021-01-22 05:45:11,936]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#8'
#6(D)[2021-01-22 05:45:11,936]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2021-01-22 05:45:11,936]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#8(D)[2021-01-22 05:45:11,936]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-22 05:45:11,936]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>    Group =>
#1(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>        Processes =>
#5(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#6(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#7(D)[2021-01-22 05:45:11,936]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-22 05:45:11,936]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(I)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(I)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#1(I)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#2(D)[2021-01-22 05:45:11,936]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-22 05:45:11,936]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#0(D)[2021-01-22 05:45:11,936]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#1(D)[2021-01-22 05:45:11,936]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2021-01-22 05:45:12,139]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#3(I)[2021-01-22 05:45:12,139]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-22 06:01:57,772]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#5(I)[2021-01-22 06:01:57,772]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-22 06:01:57,834]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#7(I)[2021-01-22 06:01:57,834]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-28 06:26:17,848]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#9(I)[2021-01-28 06:26:17,848]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#0(I)[2021-01-28 06:26:17,848]{000007F8}<NvpWatchdog>      Session event was signaled
#1(I)[2021-01-28 06:26:17,848]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-28 06:26:17,848]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#3(I)[2021-01-28 06:26:17,895]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-28 06:26:18,035]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#10'
#5(I)[2021-01-28 06:26:18,035]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#10'
#6(D)[2021-01-28 06:26:18,035]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2021-01-28 06:26:18,035]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#8(D)[2021-01-28 06:26:18,035]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-28 06:26:18,035]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>    Group =>
#1(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>        Processes =>
#5(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#6(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#7(D)[2021-01-28 06:26:18,035]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-28 06:26:18,035]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(I)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(I)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#1(I)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#2(D)[2021-01-28 06:26:18,035]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-28 06:26:18,035]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#0(D)[2021-01-28 06:26:18,035]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#1(D)[2021-01-28 06:26:18,035]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2021-01-28 06:26:18,035]{000007F8}<NvpWatchdog>      Session event was signaled
#3(I)[2021-01-28 06:26:18,035]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-28 06:26:18,082]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#10'
#5(I)[2021-01-28 06:26:18,082]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#10'
#6(D)[2021-01-28 06:26:18,082]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2021-01-28 06:26:18,082]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#8(D)[2021-01-28 06:26:18,082]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-28 06:26:18,082]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>    Group =>
#1(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>        Processes =>
#5(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#6(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#7(D)[2021-01-28 06:26:18,082]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-28 06:26:18,082]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(I)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(I)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#1(I)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#2(D)[2021-01-28 06:26:18,082]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-28 06:26:18,082]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#0(D)[2021-01-28 06:26:18,082]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#1(D)[2021-01-28 06:26:18,082]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2021-01-28 06:26:18,301]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#3(I)[2021-01-28 06:26:18,301]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-28 17:37:53,775]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#5(I)[2021-01-28 17:37:53,775]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-28 17:37:53,853]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#7(I)[2021-01-28 17:37:53,853]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-28 21:50:23,987]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#9(I)[2021-01-28 21:50:23,987]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#0(I)[2021-01-28 21:50:23,987]{000007F8}<NvpWatchdog>      Session event was signaled
#1(I)[2021-01-28 21:50:23,987]{00000588}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-28 21:50:23,987]{00000588}<NvpWatchdog>      Signaled watchdog session change event.
#3(I)[2021-01-28 21:50:24,003]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-28 21:50:24,143]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#12'
#5(I)[2021-01-28 21:50:24,143]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#12'
#6(D)[2021-01-28 21:50:24,143]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2021-01-28 21:50:24,143]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#8(D)[2021-01-28 21:50:24,143]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-28 21:50:24,143]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>    Group =>
#1(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>        Processes =>
#5(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#6(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#7(D)[2021-01-28 21:50:24,143]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-28 21:50:24,143]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(I)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(I)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#1(I)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#2(D)[2021-01-28 21:50:24,143]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-28 21:50:24,143]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#0(D)[2021-01-28 21:50:24,143]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#1(D)[2021-01-28 21:50:24,143]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2021-01-28 21:50:24,143]{000007F8}<NvpWatchdog>      Session event was signaled
#3(I)[2021-01-28 21:50:24,143]{000007F8}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2021-01-28 21:50:24,174]{000007F8}<NvpWatchdog>          User session 2 - 'RDP-Tcp#12'
#5(I)[2021-01-28 21:50:24,174]{000007F8}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#12'
#6(D)[2021-01-28 21:50:24,174]{000007F8}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2021-01-28 21:50:24,174]{000007F8}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#8(D)[2021-01-28 21:50:24,174]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-28 21:50:24,174]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>    Group =>
#1(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>        Processes =>
#5(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#6(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#7(D)[2021-01-28 21:50:24,174]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2021-01-28 21:50:24,174]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(I)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#0(I)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>    Container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#1(I)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>    Container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#2(D)[2021-01-28 21:50:24,174]{000007F8}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-28 21:50:24,174]{000007F8}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>    Group =>
#5(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildGroup>        Processes =>
#9(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildProcess>          Session 1, process 0000000000000410
#0(D)[2021-01-28 21:50:24,174]{000007F8}<NvpChildProcess>          Session 2, process 000000000000043C
#1(D)[2021-01-28 21:50:24,174]{000007F8}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2021-01-28 21:50:24,284]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#3(I)[2021-01-28 21:50:24,284]{00000588}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-28 22:46:33,674]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#5(I)[2021-01-28 22:46:33,674]{00000588}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-28 22:46:33,784]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#7(I)[2021-01-28 22:46:33,784]{00000588}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-02-05 11:57:23,821]{00000764}<DirectoryListene> Quit event signaled. Ending thread function.
#8(I)[2021-02-05 11:57:23,821]{000007F8}<NvpWatchdog>      Quit event was signaled
#0(I)[2021-02-05 11:57:23,899]{000007F8}<NvpWatchdog>      Stopping child containers
#1(I)[2021-02-05 11:57:23,899]{000007F8}<NvpChildProcess>  Request container 0000000000000410 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session in session 1 to exit
#2(I)[2021-02-05 11:57:23,899]{000007F8}<NvpChildProcess>  Request container 000000000000043C for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session in session 2 to exit
#3(I)[2021-02-05 11:57:23,899]{000007F8}<NvpWatchdog>      Wait for containers to exit - 15000 ms
#4(I)[2021-02-05 11:57:23,899]{000007F8}<NvpChildProcess>  Wait for container 0000000000000410 - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session to stop for 15000 ms
#5(I)[2021-02-05 11:57:24,961]{00000588}<DirectoryListene> Waiting for the listener thread to finish...
#6(I)[2021-02-05 11:57:24,961]{00000588}<DirectoryListene> Listener thread finished...
#7(I)[2021-02-05 11:57:25,039]{000007F8}<NvpChildProcess>  Wait for container 000000000000043C - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session to stop for 13860 ms
#8(I)[2021-02-05 11:57:25,055]{000007F8}<NvpWatchdog>      Child containers stopped

Anon7 - 2022
AnonSec Team