Microsoft-Windows-Hyper-V-EmulatedStor

{
  "system": {
    "provider": "Microsoft-Windows-Hyper-V-EmulatedStor",
    "guid": "{86E15E01-EDF1-4AC7-89CF-B19563FD6894}",
    "event_source_name": "",
    "event_id": 12140,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": -9223372036854775808,
    "time_created": "2026-06-13T15:46:57.7400240+00:00",
    "event_record_id": 203,
    "correlation": {
      "ActivityID": "{0726B8BA-FB3C-0003-042C-29073CFBDC01}"
    },
    "execution": {
      "process_id": 8888,
      "thread_id": 5368
    },
    "channel": "Microsoft-Windows-Hyper-V-Worker-Admin",
    "computer": "telemetry-W11-d.cell-d.ludus.domain",
    "security": {
      "user_id": "S-1-5-83-1-838361004-1162202325-2130707894-2078394515"
    }
  },
  "user_data": {
    "VmlEventLog": {
      "VmName": "evtgen-linux",
      "VmId": "31F85FAC-CCD5-4545-B605-007F93C8E17B",
      "String": "C:\\evtgen-hvlinux\\boot_075030EA-1355-4DB9-AC4E-69174C39DD74.avhdx",
      "ErrorCodeString": "%%2147942432",
      "ErrorCode": "7864368",
      "Param1": "80070020",
      "Param2": "IDE/ATAPI"
    }
  },
  "message": "'evtgen-linux': Failed to open attachment 'C:\\evtgen-hvlinux\\boot_075030EA-1355-4DB9-AC4E-69174C39DD74.avhdx'. Error: 'The process cannot access the file because it is being used by another process. ' (7864368). (Virtual machine ID 31F85FAC-CCD5-4545-B605-007F93C8E17B)"
}