- System 

  - Provider 

   [ Name]  TermDD 
 
  - EventID 56 

   [ Qualifiers]  49162 
 
   Level 2 
 
   Task 0 
 
   Keywords 0x80000000000000 
 
  - TimeCreated 

   [ SystemTime]  2018-06-08T06:07:59.387Z 
 
   EventRecordID 947384 
 
   Channel System 
 
   Computer xxx
 
   Security 
 

- EventData 

   \Device\Termdd 
   006F0400010000000000000038000AC00000000038000AC00000000000000000000000000000000005000780 


Binary data:


In words

0000: 00046F00 00000001 00000000 C00A0038 
0008: 00000000 C00A0038 00000000 00000000 
0010: 00000000 00000000 80070005  


In bytes

0000: 00 6F 04 00 01 00 00 00   .o......
0008: 00 00 00 00 38 00 0A C0   ....8..A
0010: 00 00 00 00 38 00 0A C0   ....8..A
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 05 00 07 80               ...?