Searched for `SURPRISE_REMOVAL` in the ~40MB capture log, only to find it at the very bottom:
[255854 ms] UsbSnoop - FilterDispatchPnp(9e07345c) : IRP_MJ_PNP (IRP_MN_QUERY_DEVICE_RELATIONS)
[255854 ms] UsbSnoop - FdoHookDispatchPnp(9e07345c) : IRP_MJ_PNP (IRP_MN_QUERY_DEVICE_RELATIONS)
[255854 ms] UsbSnoop - FilterDispatchPnp(9e07345c) : IRP_MJ_PNP (IRP_MN_QUERY_DEVICE_RELATIONS)
[255854 ms] UsbSnoop - FdoHookDispatchPnp(9e07345c) : IRP_MJ_PNP (IRP_MN_QUERY_DEVICE_RELATIONS)
[255911 ms] UsbSnoop - FilterDispatchPnp(9e07345c) : IRP_MJ_PNP (IRP_MN_SURPRISE_REMOVAL)
[255911 ms] UsbSnoop - FdoHookDispatchPnp(9e07345c) : IRP_MJ_PNP (IRP_MN_SURPRISE_REMOVAL)
[323242 ms] UsbSnoop - FilterDispatchPnp(9e07345c) : IRP_MJ_PNP (IRP_MN_REMOVE_DEVICE)