When I look at the Windows Security log I see that the following process changed the time:
"C:\Program Files\VMware\VMware Tools\vmtoolsd.exe"
When looking at vSphere Tasks and Events I see 5 minutes prior:
"Migrating VM from Host01, DiskCluster01 to Host01, DiskCluster01
2014-10-22 10:33:43
Execute Storage vMotion for Storage DRS DiskCluster01"
Does this count as a vMotion?