$ 0 0 That looks like a timestamp coming from a Windows 2008 server.Is that correct ? Or is that VM running another OS version ?