EvtSystemTimeCreated
const win32evtlog.EvtSystemTimeCreated;