Event[0]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T18:46:18.0950000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[1]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T18:18:56.3160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[2]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T18:05:29.3700000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\NearbyShareLauncher_xyz345f542f50\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\8549c8038f46d4f3_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[3]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T18:05:29.3690000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NearbyShareLauncher_xyz345f542f50\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T18:05:29.3680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NearbyShareLauncher_xyz345f542f50\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T17:58:30.2630000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl8410d30f
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4D079651-6A69-43B6-8E30-F2EC81FB00F5}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[6]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-11T17:58:30.2330000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3591.0) - Current Channel (Broad) 

Event[7]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-11T17:58:26.0220000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3591.0) - Current Channel (Broad) 

Event[8]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-11T17:58:18.5410000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T17:57:29.1090000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\GameraGame.DysonSphereProgram_2wj4xdcanw8jj\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[10]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:56:51.4930000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001520000001). Process Id 0x8988 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T17:56:51.4840000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:54:43.5950000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001520000001). Status: 0x0. Process Id 0x8988 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:54:43.5890000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x8988 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:54:43.4900000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x8988 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[15]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:54:43.4860000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001120000001). Process Id 0x8988 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[16]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:54:32.2800000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001120000001). Status: 0x0. Process Id 0x8988 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[17]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:54:32.2670000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x8988 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[18]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:54:27.4290000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x8988 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[19]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T17:54:23.2510000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[20]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:53:28.2440000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[21]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T17:50:41.7540000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl68434487
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DCAD5A9A-0801-40A2-BEEE-37A54D011B66}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[22]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:50:14.6600000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[23]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:50:10.7150000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[24]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:50:10.7150000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[25]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:50:10.7150000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[26]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8580000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 24904. 

Event[27]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8580000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 24904. 

Event[28]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8580000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[29]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[30]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[31]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[32]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[33]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[34]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[35]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[36]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[37]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{f31c8dfc-c8fb-11ee-8968-086ac578260b}" 

Event[38]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[39]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[40]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[41]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[42]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[43]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[44]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[45]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[46]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[47]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[48]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[49]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[50]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[51]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[52]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[53]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[54]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[55]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[56]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[57]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:50:06.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[58]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:50:01.6880000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[59]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:49:04.3310000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[60]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:49:04.3290000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[61]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-11T17:49:04.1340000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[62]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:35.2340000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/1a907693-79b5-4591-96f6-a748235c40ff/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x14B0 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[63]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:35.2340000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001520000001. Status 0x0. Process Id 0x14B0 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[64]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T17:48:18.4070000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[65]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T17:48:14.4770000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[66]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T17:48:14.3170000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[67]
  Log Name: System
  Source: TPM
  Date: 2024-02-11T17:48:13.7810000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[68]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:48:10.9120000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[69]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T17:48:09.3240000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[70]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.1880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x1828 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[71]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.1880000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001120000001. Status 0x0. Process Id 0x1828 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[72]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T17:48:09.1600000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[73]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T17:48:09.1130000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[74]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[75]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[76]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[77]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[78]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[79]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[80]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[81]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[82]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[83]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[84]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[85]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[86]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[87]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[88]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[89]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[90]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:48:09.0690000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[91]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-11T17:48:07.9480000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[92]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T17:48:07.9420000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[93]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T17:48:07.9420000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[94]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T17:48:07.9420000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[95]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:48:07.9030000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[96]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:48:07.8990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[97]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:48:07.8940000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[98]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:48:07.8940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[99]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:48:07.8940000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[100]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:48:07.8880000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[101]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:48:07.8740000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[102]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:48:07.8720000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[103]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-11T17:48:07.0110000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffffda00e3f3b180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\021124-14546-01.dmp. Report Id: b61dd66c-a1d1-43f0-9a76-ddcc3dc6b42c. 

Event[104]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T17:48:06.9180000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[105]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T17:48:06.9180000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[106]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T17:48:06.9150000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[107]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.9080000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[108]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.9070000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[109]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.8980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[110]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.8950000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[111]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.8810000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[112]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.8790000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[113]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.8780000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[114]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.8720000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[115]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.8620000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[116]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.8580000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[117]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:48:06.8480000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[118]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T17:48:06.8240000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[119]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T17:48:06.8240000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[120]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-11T17:48:05.2350000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[121]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T17:48:04.3770000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[122]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:48:03.9110000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[123]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:48:03.5380000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[124]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T17:48:02.8070000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[125]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:48:02.5440000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[126]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-11T17:48:02.4610000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[127]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:48:02.3260000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[128]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T17:48:00.2790000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[129]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:48:00.1190000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[130]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:48:00.1190000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[131]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:48:00.0570000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[132]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:48:00.0570000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[133]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:48:00.0410000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[134]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:48:00.0250000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[135]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-11T17:48:00.0250000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[136]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-11T17:47:59.9630000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[137]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9710000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[138]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[139]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9690000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[140]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[141]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[142]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[143]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9590000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[144]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9580000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[145]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[146]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[147]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[148]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[149]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[150]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[151]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[152]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[153]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[154]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9330000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[155]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9290000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[156]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[157]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[158]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[159]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9260000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[160]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:47:59.9120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[161]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T17:47:59.6130000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[162]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T17:47:59.6030000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[163]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T17:47:59.6020000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[164]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:47:59.5750000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[165]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:47:59.4860000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[166]
  Log Name: System
  Source: volmgr
  Date: 2024-02-11T17:47:59.4540000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[167]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:47:59.4310000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[168]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:47:54.6320000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[169]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:47:54.6310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[170]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:47:54.6300000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[171]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-11T17:47:53.2010000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[172]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T17:48:08.0410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[173]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T17:48:08.0410000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[174]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T17:48:08.0410000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[175]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T17:48:08.0410000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 17:40:43 on ?11/?02/?2024 was unexpected. 

Event[176]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T17:47:53.1530000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[177]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:47:53.1470000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[178]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:47:53.1470000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[179]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:47:53.1470000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[180]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:47:53.1470000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?11T17:47:52.000000000Z. 

Event[181]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:47:53.1470000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[182]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:47:53.1470000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[183]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:47:53.1470000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[184]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:47:53.1470000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[185]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T17:47:53.1470000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?11T17:47:52.500000000Z. 

Event[186]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T17:43:00.5900000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[187]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T17:43:00.5890000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[188]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T17:42:59.6540000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[189]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T17:42:59.6520000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[190]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T17:42:59.4230000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[191]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T17:42:54.6270000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[192]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:42:48.7650000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/d7226a49-f7ad-4a86-ab7c-87236ffbd083/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x1540 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[193]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:42:48.7650000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001020000001. Status 0x0. Process Id 0x1540 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[194]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:42:46.2410000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[195]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:42:46.2410000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[196]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:42:46.2400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[197]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:42:06.2470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[198]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25016. 

Event[199]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25016. 

Event[200]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[201]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[202]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[203]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[204]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[205]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[206]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[207]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[208]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{f31c8dfc-c8fb-11ee-8968-086ac578260b}" 

Event[209]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[210]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[211]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[212]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[213]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[214]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[215]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[216]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[217]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[218]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[219]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[220]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[221]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[222]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[223]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[224]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[225]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[226]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[227]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[228]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T17:41:56.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[229]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:41:55.3650000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[230]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:41:01.5860000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[231]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T17:41:01.5850000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[232]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-11T17:41:01.3760000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[233]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T17:40:54.4270000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[234]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T17:40:47.6340000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[235]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T17:40:47.4250000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[236]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:47.2300000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[237]
  Log Name: System
  Source: TPM
  Date: 2024-02-11T17:40:46.7590000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[238]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-11T17:40:45.4130000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_046D&PID_C548&MI_00\9&5EEB590&0&0000 with the following status: 0. 

Event[239]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T17:40:45.1790000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[240]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-11T17:40:45.1040000Z
  Event ID: 3
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A hardware event has occurred. An informational record describing the condition is contained in the data section of this event. 

Event[241]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T17:40:45.0510000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[242]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:45.0380000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x171C Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[243]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:45.0380000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000C20000001. Status 0x0. Process Id 0x171C Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[244]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T17:40:45.0100000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[245]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[246]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[247]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[248]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[249]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[250]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[251]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[252]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[253]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[254]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[255]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[256]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[257]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[258]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[259]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[260]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9490000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[261]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T17:40:44.9480000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[262]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T17:40:44.4650000Z
  Event ID: 33
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 100Mbps full duplex.
 

Event[263]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-11T17:40:44.4520000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[264]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T17:40:44.4470000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[265]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T17:40:44.4470000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[266]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T17:40:44.4470000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[267]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:43.6740000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[268]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:43.6710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[269]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:43.6670000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[270]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:43.6670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[271]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:43.6670000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[272]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:43.6560000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[273]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:43.6490000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[274]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:43.6450000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[275]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-11T17:40:43.1730000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffffd6818013b180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\021124-17734-01.dmp. Report Id: 07579e06-be89-4a1b-bc30-22d9be6a9f88. 

Event[276]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T17:40:43.0660000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[277]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T17:40:43.0660000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[278]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T17:40:43.0630000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[279]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0560000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[280]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0550000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[281]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0460000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[282]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0430000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[283]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0290000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[284]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0270000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[285]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0260000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[286]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0200000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[287]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0100000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[288]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:43.0060000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[289]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T17:40:42.9950000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[290]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T17:40:42.9720000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[291]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T17:40:42.9720000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[292]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-11T17:40:41.3470000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[293]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T17:40:40.4560000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[294]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:40:39.9950000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[295]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:40:39.6260000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[296]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:40:38.6500000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[297]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-11T17:40:36.2530000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[298]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:40:35.5150000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[299]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T17:40:33.4710000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[300]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:40:33.3130000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[301]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:40:33.3130000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[302]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:40:33.2500000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[303]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:40:33.2500000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[304]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:40:33.2340000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[305]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T17:40:33.2190000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[306]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-11T17:40:33.2190000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[307]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-11T17:40:33.1560000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[308]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1630000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[309]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[310]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[311]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1590000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[312]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1530000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[313]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[314]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[315]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[316]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1440000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[317]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[318]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1390000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[319]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[320]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[321]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[322]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1300000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[323]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1290000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[324]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1260000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[325]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1250000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[326]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1220000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[327]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1220000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[328]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1210000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[329]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1200000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[330]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[331]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T17:40:33.1050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[332]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T17:40:32.7900000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[333]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T17:40:32.7800000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[334]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T17:40:32.7790000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[335]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:32.7520000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[336]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:32.6630000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[337]
  Log Name: System
  Source: volmgr
  Date: 2024-02-11T17:40:32.6190000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[338]
  Log Name: System
  Source: volmgr
  Date: 2024-02-11T17:40:32.6190000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[339]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T17:40:32.5990000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[340]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:27.6080000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[341]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:27.6070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[342]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T17:40:27.6060000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[343]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T17:40:43.8030000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 18 seconds. 

Event[344]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T17:40:43.8030000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[345]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T17:40:43.8030000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[346]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T17:40:43.8030000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 16:48:35 on ?11/?02/?2024 was unexpected. 

Event[347]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-11T17:40:26.1920000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[348]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T17:40:26.1460000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[349]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:40:26.1410000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[350]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:40:26.1410000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[351]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:40:26.1410000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[352]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:40:26.1410000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?11T17:40:25.000000000Z. 

Event[353]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:40:26.1400000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[354]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:40:26.1400000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[355]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:40:26.1400000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[356]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T17:40:26.1400000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[357]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T17:40:26.1400000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?11T17:40:25.500000000Z. 

Event[358]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:49:40.0150000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[359]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:49:31.1420000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  cpuz158
Service File Name:  C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[360]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6080000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 24776. 

Event[361]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6080000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 24776. 

Event[362]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6080000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[363]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6080000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[364]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[365]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[366]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[367]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[368]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[369]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[370]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[371]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{f31c8dfc-c8fb-11ee-8968-086ac578260b}" 

Event[372]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[373]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[374]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[375]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[376]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[377]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[378]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[379]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[380]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[381]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[382]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[383]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[384]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[385]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[386]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[387]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[388]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[389]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[390]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[391]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:49:27.6050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[392]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:49:26.5470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[393]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:49:14.4360000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[394]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:49:14.4360000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[395]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:49:14.4350000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[396]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:49:13.6400000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[397]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:49:13.6380000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[398]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:49:09.9580000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[399]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:55.7620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/ddacb507-50a9-40f3-ad32-eec03dab81fe/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x14F4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[400]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:55.7620000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001520000001. Status 0x0. Process Id 0x14F4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[401]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:48:55.0800000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[402]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:48:55.0780000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[403]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-11T16:48:54.8710000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[404]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:48:46.2590000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[405]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T16:48:43.2610000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[406]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T16:48:42.9780000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[407]
  Log Name: System
  Source: TPM
  Date: 2024-02-11T16:48:42.0770000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[408]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:38.4690000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[409]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:48:36.9180000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[410]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.7190000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x18B4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[411]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.7190000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000820000001. Status 0x0. Process Id 0x18B4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[412]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T16:48:36.6870000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[413]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T16:48:36.6420000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[414]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[415]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[416]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[417]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[418]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[419]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[420]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[421]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[422]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[423]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[424]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[425]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[426]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[427]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[428]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[429]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[430]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:48:36.5970000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[431]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-11T16:48:35.4060000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[432]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T16:48:35.4000000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[433]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T16:48:35.4000000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[434]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T16:48:35.4000000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[435]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:35.3800000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[436]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:35.3770000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[437]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:35.3730000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[438]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:35.3730000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[439]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:35.3730000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[440]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:35.3680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[441]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:35.3610000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[442]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:35.3570000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[443]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T16:48:34.9350000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[444]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T16:48:34.9350000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[445]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T16:48:34.9320000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[446]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.9250000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[447]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.9240000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[448]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.9150000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[449]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.9120000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[450]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-11T16:48:34.9070000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000001e (0xffffffff80000003, 0xfffff8017cc5ad44, 0x0000000000000000, 0xfffff80149e6af80). A dump was saved in: C:\WINDOWS\Minidump\021124-14515-01.dmp. Report Id: 7d115a35-6b90-4b53-817c-9e7dda2eeedd. 

Event[451]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.8990000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[452]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.8970000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[453]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.8950000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[454]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.8900000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[455]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.8800000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[456]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.8760000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[457]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:48:34.8650000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[458]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T16:48:34.8420000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[459]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T16:48:34.8420000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[460]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-11T16:48:33.2120000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[461]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:48:32.3460000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[462]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:48:31.8630000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[463]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:48:31.6180000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[464]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T16:48:30.8930000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[465]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:48:30.7370000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[466]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:48:30.5230000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[467]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-11T16:48:30.0990000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[468]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T16:48:28.4650000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[469]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:48:28.4180000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[470]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:48:28.4180000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[471]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:48:28.3550000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[472]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:48:28.3550000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[473]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:48:28.3390000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[474]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:48:28.3240000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[475]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-11T16:48:28.3240000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[476]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-11T16:48:28.2770000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[477]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[478]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[479]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[480]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2760000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[481]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[482]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2690000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[483]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[484]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[485]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[486]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[487]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[488]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2550000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[489]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[490]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[491]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[492]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2480000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[493]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[494]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[495]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2440000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[496]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[497]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[498]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[499]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2400000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[500]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:48:28.2260000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[501]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T16:48:27.8190000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[502]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T16:48:27.8080000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[503]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T16:48:27.8070000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[504]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:27.7790000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[505]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:27.6890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[506]
  Log Name: System
  Source: volmgr
  Date: 2024-02-11T16:48:27.6570000Z
  Event ID: 162
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file generation succeded. 

Event[507]
  Log Name: System
  Source: volmgr
  Date: 2024-02-11T16:48:27.6410000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[508]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:48:27.6260000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[509]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:22.9070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[510]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:22.9060000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[511]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:48:22.9050000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[512]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:48:35.5120000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 14 seconds. 

Event[513]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:48:35.5120000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[514]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:48:35.5120000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[515]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:48:35.5120000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 16:44:11 on ?11/?02/?2024 was unexpected. 

Event[516]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-11T16:48:21.4800000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[517]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:48:21.3880000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[518]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:48:21.3780000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[519]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:48:21.3780000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[520]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:48:21.3780000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[521]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:48:21.3780000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?11T16:48:20.000000000Z. 

Event[522]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:48:21.3780000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[523]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:48:21.3780000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[524]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:48:21.3780000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[525]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:48:21.3780000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[526]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:48:21.3780000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?11T16:48:20.500000000Z. 

Event[527]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:46:44.9990000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsledd96f67
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DCAD5A9A-0801-40A2-BEEE-37A54D011B66}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[528]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:46:37.7970000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[529]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:31.0530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[530]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25228. 

Event[531]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25228. 

Event[532]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[533]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[534]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[535]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[536]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[537]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[538]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[539]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[540]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[541]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{f31c8dfc-c8fb-11ee-8968-086ac578260b}" 

Event[542]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[543]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[544]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[545]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[546]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[547]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[548]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[549]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[550]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[551]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[552]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[553]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[554]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[555]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[556]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[557]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[558]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[559]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[560]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[561]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:46:28.7560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[562]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:46:25.9910000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[563]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:46:14.0250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[564]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:45:32.0210000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/7f1de28b-5c71-4f60-887e-7801599b5c1a/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x152C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[565]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:45:32.0210000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000A20000001. Status 0x0. Process Id 0x152C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[566]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:45:31.4010000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[567]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:45:31.3990000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[568]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-11T16:45:31.2050000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[569]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:44:21.9320000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[570]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T16:44:17.9450000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[571]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T16:44:17.7420000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[572]
  Log Name: System
  Source: TPM
  Date: 2024-02-11T16:44:16.8250000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[573]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:14.6060000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[574]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:44:12.6460000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[575]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-11T16:44:12.5160000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[576]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T16:44:12.4730000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[577]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.4530000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x1758 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[578]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.4530000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001420000001. Status 0x0. Process Id 0x1758 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[579]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T16:44:12.4230000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[580]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[581]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[582]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[583]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[584]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[585]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[586]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[587]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[588]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[589]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[590]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[591]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[592]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[593]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[594]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[595]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[596]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:44:12.3610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[597]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-11T16:44:11.1210000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[598]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T16:44:11.1150000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[599]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T16:44:11.1150000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[600]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T16:44:11.1150000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[601]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:11.1120000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[602]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:11.1080000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[603]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:11.1030000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[604]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:11.1030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[605]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:11.1030000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[606]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:11.0980000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[607]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:11.0880000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[608]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:11.0840000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[609]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T16:44:10.1780000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[610]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T16:44:10.1780000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[611]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T16:44:10.1740000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[612]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1660000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[613]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1660000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[614]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1550000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[615]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1520000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[616]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1360000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[617]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1350000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[618]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1330000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[619]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1280000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[620]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1180000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[621]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.1140000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[622]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:44:10.0990000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[623]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T16:44:10.0760000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[624]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T16:44:10.0760000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[625]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-11T16:44:08.4230000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[626]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:44:07.5580000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[627]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:44:07.0910000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[628]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:44:06.7490000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[629]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T16:44:05.8170000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[630]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:44:05.7160000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[631]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:44:05.4880000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[632]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-11T16:44:05.0230000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[633]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T16:44:03.2970000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[634]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:44:03.2500000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[635]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:44:03.2500000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[636]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:44:03.1880000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[637]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:44:03.1880000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[638]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:44:03.1720000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[639]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:44:03.1560000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[640]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-11T16:44:03.1560000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[641]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-11T16:44:03.1090000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[642]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.1080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[643]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.1070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[644]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.1060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[645]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.1050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[646]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[647]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[648]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[649]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0960000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[650]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[651]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[652]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[653]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[654]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[655]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[656]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[657]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[658]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[659]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[660]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[661]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[662]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0760000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[663]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0760000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[664]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[665]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:44:03.0610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[666]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T16:44:02.6510000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[667]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T16:44:02.6410000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[668]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T16:44:02.6390000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[669]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:02.6120000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[670]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:44:02.5220000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[671]
  Log Name: System
  Source: volmgr
  Date: 2024-02-11T16:44:02.4890000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[672]
  Log Name: System
  Source: volmgr
  Date: 2024-02-11T16:44:02.4730000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[673]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:44:02.4580000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[674]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:43:57.6780000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[675]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:43:57.6770000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[676]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:43:57.6760000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[677]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:44:11.2440000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[678]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:44:11.2440000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[679]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:44:11.2440000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[680]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:44:11.2430000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 16:38:38 on ?11/?02/?2024 was unexpected. 

Event[681]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-11T16:43:56.2680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[682]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:43:56.2150000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[683]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:43:56.2090000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[684]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:43:56.2090000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[685]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:43:56.2090000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[686]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:43:56.2090000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?11T16:43:54.000000000Z. 

Event[687]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:43:56.2090000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[688]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:43:56.2080000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[689]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:43:56.2080000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[690]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:43:56.2080000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[691]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:43:56.2080000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?11T16:43:55.500000000Z. 

Event[692]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:41:13.3930000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslfb4ea25c
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DCAD5A9A-0801-40A2-BEEE-37A54D011B66}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[693]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:41:02.5050000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  cpuz158
Service File Name:  C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[694]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:40:42.0510000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[695]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:40:42.0510000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[696]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:40:42.0510000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[697]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:40:10.6480000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[698]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:39:28.6530000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[699]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:39:22.5280000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[700]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:39:22.5270000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[701]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:39:21.7140000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[702]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:39:21.7100000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[703]
  Log Name: System
  Source: ACPI
  Date: 2024-02-11T16:39:21.7090000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[704]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 28028. 

Event[705]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 28028. 

Event[706]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[707]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[708]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[709]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[710]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[711]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[712]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{f31c8dfc-c8fb-11ee-8968-086ac578260b}" 

Event[713]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[714]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[715]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[716]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[717]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[718]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[719]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[720]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[721]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[722]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[723]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[724]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[725]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[726]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[727]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[728]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[729]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[730]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[731]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[732]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-11T16:39:19.3500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[733]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:39:18.1220000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[734]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:39:17.7910000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[735]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:39:12.3370000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[736]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:57.1680000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/a7448e8a-61a9-4ef1-be73-a745a0bd9e86/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x18E4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[737]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:57.1670000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x18E4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[738]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:38:49.9520000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[739]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T16:38:47.0330000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[740]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-11T16:38:46.7210000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[741]
  Log Name: System
  Source: TPM
  Date: 2024-02-11T16:38:44.8210000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[742]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:42.7650000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[743]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-11T16:38:40.2650000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[744]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-11T16:38:40.2310000Z
  Event ID: 3
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A hardware event has occurred. An informational record describing the condition is contained in the data section of this event. 

Event[745]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T16:38:40.1380000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[746]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:40.0870000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x1AAC Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[747]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:40.0860000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000E20000001. Status 0x0. Process Id 0x1AAC Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[748]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-11T16:38:40.0750000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[749]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[750]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[751]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[752]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[753]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[754]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[755]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[756]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[757]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[758]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[759]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[760]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[761]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[762]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[763]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[764]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[765]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-11T16:38:39.9890000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[766]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:38:39.7130000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[767]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-11T16:38:39.7110000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[768]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-11T16:38:39.5370000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[769]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-11T16:38:38.8090000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[770]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T16:38:38.8020000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[771]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T16:38:38.8020000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[772]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-11T16:38:38.8020000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[773]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:38.7500000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[774]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:38.7480000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[775]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:38.7430000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[776]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:38.7430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[777]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:38.7430000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[778]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:38.7380000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[779]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:38.7300000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[780]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:38.7250000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[781]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T16:38:38.1490000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[782]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T16:38:38.1490000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[783]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-11T16:38:38.1450000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[784]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.1370000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[785]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.1360000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[786]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.1250000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[787]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.1220000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[788]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.1070000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[789]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.1060000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[790]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.1040000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[791]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.0990000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[792]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.0890000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[793]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.0850000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[794]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-11T16:38:38.0710000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[795]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T16:38:38.0480000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[796]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-11T16:38:38.0480000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[797]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-11T16:38:36.3280000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[798]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:38:35.4510000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[799]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:38:34.7380000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[800]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:38:34.3800000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[801]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:38:33.3320000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[802]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:38:32.6900000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[803]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T16:38:30.1680000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[804]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-11T16:38:29.1510000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[805]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-11T16:38:27.7040000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[806]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:38:27.6570000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[807]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:38:27.6570000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[808]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:38:27.5940000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[809]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:38:27.5940000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[810]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:38:27.5790000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[811]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-11T16:38:27.5630000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[812]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-11T16:38:27.5630000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[813]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-11T16:38:27.5160000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[814]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.5150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[815]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.5140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[816]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.5130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[817]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.5120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[818]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.5060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[819]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.5050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[820]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.5040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[821]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.5030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[822]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[823]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[824]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[825]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[826]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[827]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[828]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[829]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[830]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[831]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[832]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[833]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[834]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[835]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[836]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[837]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-11T16:38:27.4680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[838]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T16:38:26.9220000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[839]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T16:38:26.9090000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[840]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-11T16:38:26.9040000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[841]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:26.8350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[842]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:26.6350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[843]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-11T16:38:26.4740000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[844]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:16.4780000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[845]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:16.4770000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[846]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-11T16:38:16.4760000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[847]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:38:38.8830000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 25 seconds. 

Event[848]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:38:38.8820000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[849]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:38:38.8820000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[850]
  Log Name: System
  Source: EventLog
  Date: 2024-02-11T16:38:38.8820000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 23:07:00 on ?10/?02/?2024 was unexpected. 

Event[851]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-11T16:38:14.2600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[852]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:38:14.2120000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[853]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[854]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[855]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[856]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?11T16:38:13.000000000Z. 

Event[857]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[858]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[859]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[860]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[861]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[862]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 29
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows failed fast startup with error status 0xC00000D4. 

Event[863]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[864]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-11T16:38:14.2050000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?11T16:38:13.500000000Z. 

Event[865]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T22:36:01.4470000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[866]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T22:33:50.2750000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[867]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T21:58:36.3770000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x2D34 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[868]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T21:58:36.3700000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[869]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T21:56:25.1540000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x2D34 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[870]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T21:56:25.1470000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000F20000001). Process Id 0x2D34 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[871]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T21:56:20.3660000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000F20000001). Status: 0x0. Process Id 0x2D34 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[872]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T21:56:16.1050000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[873]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T21:34:54.3460000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 3.

Reason InputAccelerometer 

BootId: 39 

Event[874]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T21:24:22.6060000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[875]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T21:22:18.2530000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[876]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T21:14:47.0450000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[877]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T21:12:42.7970000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[878]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T20:46:18.3670000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason SessionUnlock 

BootId: 39 

Event[879]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-10T18:59:21.5200000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[880]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-10T18:42:17.5110000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[881]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-10T18:25:13.4990000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[882]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-10T18:08:09.4870000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[883]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T17:54:51.5330000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[884]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T17:52:47.4160000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[885]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-10T17:50:49.4920000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[886]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-10T17:50:49.4750000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[887]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T17:50:19.2100000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[888]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T17:18:43.0910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[889]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:57:59.7660000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[890]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:37:17.9740000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl53585e15
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DCAD5A9A-0801-40A2-BEEE-37A54D011B66}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[891]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-10T16:37:17.9620000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3529.0) - Current Channel (Broad) 

Event[892]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-10T16:37:13.8260000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3529.0) - Current Channel (Broad) 

Event[893]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-10T16:37:13.8260000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[894]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:31:06.8770000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[895]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:29:34.5330000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsldc3dfcaf
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{33ED0687-7F3E-4C1F-987A-C2ABFCCDEC44}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[896]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:29:26.9540000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[897]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:29:21.5410000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[898]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:29:21.5160000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[899]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 4760. 

Event[900]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 4760. 

Event[901]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[902]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[903]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[904]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[905]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[906]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[907]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[908]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[909]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[910]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{e3ce08b3-c82b-11ee-8962-6245b4eb6eb6}" 

Event[911]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[912]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[913]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[914]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[915]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[916]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[917]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[918]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[919]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[920]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[921]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[922]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[923]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[924]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[925]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[926]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[927]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[928]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[929]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[930]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:29:16.9630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[931]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:29:15.8010000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[932]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:29:07.9630000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[933]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:28:22.2300000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/5612c427-3c58-455f-855d-970f4096c522/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x1484 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[934]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:28:22.2300000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001720000001. Status 0x0. Process Id 0x1484 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[935]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:28:21.8800000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[936]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:28:21.8760000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[937]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-10T16:28:21.6810000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[938]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:27:11.0590000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[939]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T16:27:07.8170000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[940]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T16:27:07.6010000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[941]
  Log Name: System
  Source: TPM
  Date: 2024-02-10T16:27:06.7490000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[942]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:27:04.2690000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[943]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:27:02.2270000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[944]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-10T16:27:02.0890000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[945]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:02.0350000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x1788 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[946]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:02.0350000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000820000001. Status 0x0. Process Id 0x1788 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[947]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T16:27:02.0050000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[948]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T16:27:01.9580000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[949]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[950]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[951]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[952]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[953]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[954]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[955]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[956]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[957]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[958]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[959]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[960]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[961]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[962]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[963]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[964]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[965]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:27:01.9150000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[966]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-10T16:27:00.6660000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[967]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:27:00.6600000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[968]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:27:00.6600000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[969]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:27:00.6600000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[970]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:27:00.6550000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[971]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:27:00.6520000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[972]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:27:00.6480000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[973]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:27:00.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[974]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:27:00.6480000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[975]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:27:00.6430000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[976]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:27:00.6330000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[977]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:27:00.6290000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[978]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-10T16:27:00.0000000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffff8a81d253b180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\021024-14609-01.dmp. Report Id: 016e7e7f-80f3-40fb-9644-4d9208ada900. 

Event[979]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:26:59.9090000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[980]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:26:59.9090000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[981]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:26:59.9060000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[982]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8990000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[983]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[984]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8890000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[985]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8860000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[986]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8720000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[987]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8700000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[988]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8680000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[989]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8630000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[990]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8530000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[991]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8490000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[992]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:26:59.8390000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[993]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T16:26:59.8150000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[994]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T16:26:59.8150000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[995]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-10T16:26:58.1810000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[996]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:26:57.3160000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[997]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:26:56.8470000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[998]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:26:56.4820000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[999]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:26:55.4760000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[1000]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T16:26:55.4580000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[1001]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-10T16:26:55.3480000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[1002]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:26:55.2590000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[1003]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T16:26:53.0030000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[1004]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:26:52.9560000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1005]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:26:52.9560000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1006]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:26:52.8930000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1007]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:26:52.8930000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1008]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:26:52.8780000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1009]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:26:52.8620000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[1010]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-10T16:26:52.8620000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[1011]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-10T16:26:52.8000000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[1012]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.8070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1013]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.8050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1014]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.8040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1015]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.8030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1016]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1017]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7960000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1018]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1019]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1020]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1021]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1022]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1023]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1024]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1025]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1026]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1027]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1028]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1029]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7690000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1030]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1031]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1032]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7640000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1033]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7630000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1034]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7630000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1035]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:26:52.7490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[1036]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:26:52.4520000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[1037]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:26:52.4410000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[1038]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:26:52.4400000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[1039]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:26:52.4110000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1040]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:26:52.3220000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1041]
  Log Name: System
  Source: volmgr
  Date: 2024-02-10T16:26:52.2840000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[1042]
  Log Name: System
  Source: volmgr
  Date: 2024-02-10T16:26:52.2840000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[1043]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:26:52.2540000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[1044]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:26:47.5870000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1045]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:26:47.5860000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1046]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:26:47.5850000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1047]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:27:00.7870000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[1048]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:27:00.7870000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[1049]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:27:00.7870000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[1050]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:27:00.7870000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 16:23:04 on ?10/?02/?2024 was unexpected. 

Event[1051]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-10T16:26:46.1890000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[1052]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:26:46.1400000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[1053]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:26:46.1340000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[1054]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:26:46.1340000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[1055]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:26:46.1340000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[1056]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:26:46.1340000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?10T16:26:44.000000000Z. 

Event[1057]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:26:46.1340000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[1058]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:26:46.1340000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[1059]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:26:46.1340000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[1060]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:26:46.1340000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[1061]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:26:46.1340000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?10T16:26:45.500000000Z. 

Event[1062]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:25:38.4760000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl7a44d618
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{33ED0687-7F3E-4C1F-987A-C2ABFCCDEC44}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1063]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:25:11.7870000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1064]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:25:11.7870000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1065]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:25:11.7870000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1066]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:24:28.7690000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1067]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:24:23.6090000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1068]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:24:23.5850000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1069]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25784. 

Event[1070]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25784. 

Event[1071]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[1072]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[1073]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1074]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1075]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[1076]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[1077]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[1078]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[1079]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[1080]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{e3ce08b3-c82b-11ee-8962-6245b4eb6eb6}" 

Event[1081]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[1082]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[1083]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1084]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[1085]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1086]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[1087]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[1088]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[1089]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[1090]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[1091]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[1092]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[1093]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[1094]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[1095]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[1096]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[1097]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[1098]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[1099]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[1100]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:24:19.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[1101]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:24:18.2100000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1102]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:24:11.2830000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1103]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:24:11.2800000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1104]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:24:11.2770000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1105]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:24:11.2740000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1106]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:24:10.4560000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1107]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:24:06.1040000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1108]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:46.6090000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/a5bc3843-227e-4f0c-9a24-7ac2796a1483/) to URL group (0xFE00000D20000001). Status: 0x0. Process Id 0x141C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1109]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:46.6090000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000D20000001. Status 0x0. Process Id 0x141C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1110]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:23:45.9780000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1111]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:23:45.9770000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1112]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-10T16:23:45.7700000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[1113]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:23:14.4230000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1114]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T16:23:11.8880000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[1115]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T16:23:11.6740000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[1116]
  Log Name: System
  Source: TPM
  Date: 2024-02-10T16:23:10.7580000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[1117]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:23:08.2700000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1118]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:23:06.2700000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[1119]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:06.0760000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x16D0 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1120]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:06.0760000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x16D0 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1121]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T16:23:06.0450000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[1122]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T16:23:06.0030000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[1123]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1124]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1125]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1126]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1127]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1128]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1129]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1130]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1131]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1132]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1133]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1134]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1135]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1136]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1137]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1138]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1139]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:23:05.9610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1140]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-10T16:23:04.7330000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[1141]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:23:04.7270000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1142]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:23:04.7270000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[1143]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:23:04.7270000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1144]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:23:04.6870000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1145]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:23:04.6840000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1146]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:23:04.6800000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1147]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:23:04.6800000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[1148]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:23:04.6800000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1149]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:23:04.6750000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1150]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:23:04.6630000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1151]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:23:04.6610000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1152]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:23:04.1040000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[1153]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:23:04.1040000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[1154]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:23:04.1000000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[1155]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0920000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1156]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0910000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[1157]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0810000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[1158]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0780000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[1159]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0620000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[1160]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0610000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[1161]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0590000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[1162]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0530000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1163]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0430000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[1164]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0390000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[1165]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:23:04.0250000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[1166]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T16:23:04.0030000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[1167]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T16:23:04.0030000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[1168]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-10T16:23:02.3850000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[1169]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:23:01.5170000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[1170]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:23:01.0520000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[1171]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:23:00.6910000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[1172]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:22:59.6850000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[1173]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T16:22:59.6330000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[1174]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-10T16:22:59.6330000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[1175]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:22:59.4680000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[1176]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T16:22:57.2210000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[1177]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:22:57.1750000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1178]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:22:57.1750000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1179]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:22:57.1120000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1180]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:22:57.1120000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1181]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:22:57.0960000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1182]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:22:57.0800000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[1183]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-10T16:22:57.0800000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[1184]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-10T16:22:57.0180000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[1185]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1186]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0260000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1187]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0250000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1188]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1189]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1190]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0170000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1191]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0160000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1192]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1193]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0090000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1194]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1195]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1196]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:57.0030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1197]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1198]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1199]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1200]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1201]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1202]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1203]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1204]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1205]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1206]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1207]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1208]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:22:56.9670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[1209]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:22:56.6690000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[1210]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:22:56.6580000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[1211]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:22:56.6570000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[1212]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:22:56.6300000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1213]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:22:56.5410000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1214]
  Log Name: System
  Source: volmgr
  Date: 2024-02-10T16:22:56.5090000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[1215]
  Log Name: System
  Source: volmgr
  Date: 2024-02-10T16:22:56.4930000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[1216]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:22:56.4770000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[1217]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:22:51.5920000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1218]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:22:51.5910000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1219]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:22:51.5910000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1220]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:23:04.8160000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[1221]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:23:04.8150000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[1222]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:23:04.8150000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[1223]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:23:04.8150000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 16:15:51 on ?10/?02/?2024 was unexpected. 

Event[1224]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-10T16:22:50.2040000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[1225]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:22:50.1470000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[1226]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:22:50.1420000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[1227]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:22:50.1420000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[1228]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:22:50.1420000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[1229]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:22:50.1420000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?10T16:22:48.000000000Z. 

Event[1230]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:22:50.1410000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[1231]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:22:50.1410000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[1232]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:22:50.1410000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[1233]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:22:50.1410000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[1234]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:22:50.1410000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?10T16:22:49.500000000Z. 

Event[1235]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:17:08.3270000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1236]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:17:08.3260000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1237]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:17:08.3220000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1238]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:17:07.5360000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1239]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:17:07.5320000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1240]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:17:03.0730000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1241]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:17:02.8920000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1242]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25284. 

Event[1243]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25284. 

Event[1244]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[1245]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1246]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1247]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[1248]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[1249]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[1250]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[1251]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[1252]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{e3ce08b3-c82b-11ee-8962-6245b4eb6eb6}" 

Event[1253]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[1254]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[1255]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[1256]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1257]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1258]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[1259]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[1260]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[1261]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[1262]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[1263]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[1264]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[1265]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[1266]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[1267]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[1268]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[1269]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[1270]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[1271]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[1272]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T16:16:52.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[1273]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:16:50.9600000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1274]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:16:11.9430000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/415f28a4-4de7-46de-9ce3-a9d3e657a9b4/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x1498 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1275]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:16:11.9420000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000720000001. Status 0x0. Process Id 0x1498 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1276]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:16:02.4570000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1277]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T16:16:01.1330000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[1278]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T16:16:00.8880000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[1279]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:15:56.9250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1280]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:15:56.9230000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1281]
  Log Name: System
  Source: TPM
  Date: 2024-02-10T16:15:56.7970000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[1282]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-10T16:15:56.7100000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[1283]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:54.7500000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1284]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:15:53.3460000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[1285]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T16:15:52.9370000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[1286]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T16:15:52.8700000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[1287]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.8650000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x1658 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1288]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.8650000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x1658 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1289]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1290]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1291]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1292]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1293]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1294]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1295]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1296]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1297]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1298]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1299]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1300]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1301]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1302]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1303]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1304]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1305]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:15:52.6200000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1306]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-10T16:15:51.3170000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[1307]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:15:51.3110000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1308]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:15:51.3110000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[1309]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:15:51.3110000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1310]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:51.3070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1311]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:51.3040000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1312]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:51.3000000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1313]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:51.3000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[1314]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:51.2990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1315]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:51.2950000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1316]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:51.2860000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1317]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:51.2820000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1318]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:15:50.5580000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[1319]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:15:50.5580000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[1320]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:15:50.5540000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[1321]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.5470000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1322]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.5460000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[1323]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.5350000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[1324]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.5320000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[1325]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.5180000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[1326]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.5160000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[1327]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.5150000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[1328]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.5090000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1329]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.4990000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[1330]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.4950000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[1331]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:15:50.4810000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[1332]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T16:15:50.4580000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[1333]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T16:15:50.4580000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[1334]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-10T16:15:48.8380000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[1335]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:15:47.9810000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[1336]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:15:47.5180000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[1337]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:15:47.1940000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[1338]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T16:15:46.3440000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[1339]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:15:46.1610000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[1340]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-10T16:15:46.1190000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[1341]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:15:45.9570000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[1342]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T16:15:43.8380000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[1343]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:15:43.6790000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1344]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:15:43.6790000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1345]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:15:43.6160000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1346]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:15:43.6160000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1347]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:15:43.6000000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1348]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:15:43.5840000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[1349]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-10T16:15:43.5840000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[1350]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-10T16:15:43.5220000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[1351]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5300000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1352]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5290000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1353]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1354]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1355]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5210000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1356]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5200000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1357]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1358]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1359]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1360]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5110000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1361]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1362]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1363]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5020000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1364]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.5020000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1365]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1366]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1367]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1368]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1369]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1370]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1371]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1372]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1373]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1374]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:15:43.4710000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[1375]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:15:43.1580000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[1376]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:15:43.1470000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[1377]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:15:43.1460000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[1378]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:43.1180000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1379]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:43.0280000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1380]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:15:42.9720000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[1381]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:38.3710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1382]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:38.3700000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1383]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:15:38.3690000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1384]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:15:51.4260000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[1385]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:15:51.4260000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[1386]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:15:51.4260000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[1387]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:15:51.4260000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 16:02:50 on ?10/?02/?2024 was unexpected. 

Event[1388]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-10T16:15:36.2000000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[1389]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:15:36.1520000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[1390]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[1391]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[1392]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[1393]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?10T16:15:35.000000000Z. 

Event[1394]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[1395]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[1396]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[1397]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[1398]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[1399]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 29
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows failed fast startup with error status 0xC00000D4. 

Event[1400]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[1401]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:15:36.1460000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?10T16:15:35.500000000Z. 

Event[1402]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:03:00.3480000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1403]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T16:02:56.9030000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[1404]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T16:02:56.6540000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[1405]
  Log Name: System
  Source: TPM
  Date: 2024-02-10T16:02:55.7850000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[1406]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:53.5800000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1407]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:02:51.5550000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[1408]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-10T16:02:51.4310000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[1409]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.3610000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x1708 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1410]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.3610000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001320000001. Status 0x0. Process Id 0x1708 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1411]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T16:02:51.3310000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[1412]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T16:02:51.2890000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[1413]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1414]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1415]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1416]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1417]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1418]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1419]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1420]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1421]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1422]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1423]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1424]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1425]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1426]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1427]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1428]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1429]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:02:51.2460000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1430]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-10T16:02:49.9910000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[1431]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:02:49.9840000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1432]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:02:49.9840000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[1433]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T16:02:49.9840000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1434]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:49.9800000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1435]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:49.9770000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1436]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:49.9710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1437]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:49.9710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[1438]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:49.9710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1439]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:49.9660000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1440]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:49.9560000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1441]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:49.9520000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1442]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-10T16:02:49.2140000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffff97803133b180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\021024-14703-01.dmp. Report Id: b6c77d8b-1ac2-4cc2-a9cd-3af555b61282. 

Event[1443]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:02:49.1180000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[1444]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:02:49.1180000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[1445]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T16:02:49.1150000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[1446]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.1080000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1447]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.1080000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[1448]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.0980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[1449]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.0950000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[1450]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.0810000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[1451]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.0790000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[1452]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.0780000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[1453]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.0720000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1454]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.0620000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[1455]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.0580000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[1456]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T16:02:49.0480000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[1457]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T16:02:49.0240000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[1458]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T16:02:49.0240000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[1459]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-10T16:02:47.3980000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[1460]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:02:46.5300000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[1461]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:02:46.0610000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[1462]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:02:45.6940000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[1463]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T16:02:44.8430000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[1464]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:02:44.6780000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[1465]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:02:44.4630000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[1466]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-10T16:02:43.9640000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[1467]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T16:02:42.3970000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[1468]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:02:42.2390000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1469]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:02:42.2390000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1470]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:02:42.1760000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1471]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:02:42.1760000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1472]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:02:42.1600000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1473]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T16:02:42.1440000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[1474]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-10T16:02:42.1440000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[1475]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-10T16:02:42.0820000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[1476]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1477]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1478]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1479]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1480]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1481]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1482]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1483]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1484]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0710000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1485]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1486]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1487]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1488]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1489]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1490]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1491]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1492]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1493]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1494]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1495]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1496]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1497]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0450000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1498]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0440000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1499]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T16:02:42.0280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[1500]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:02:41.7330000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[1501]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:02:41.7230000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[1502]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T16:02:41.7210000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[1503]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:41.6940000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1504]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:41.6040000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1505]
  Log Name: System
  Source: volmgr
  Date: 2024-02-10T16:02:41.5590000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[1506]
  Log Name: System
  Source: volmgr
  Date: 2024-02-10T16:02:41.5590000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[1507]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T16:02:41.5360000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[1508]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:36.6220000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1509]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:36.6210000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1510]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T16:02:36.6200000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1511]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:02:50.1130000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[1512]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:02:50.1130000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[1513]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:02:50.1130000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[1514]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T16:02:50.1120000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 15:58:49 on ?10/?02/?2024 was unexpected. 

Event[1515]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-10T16:02:35.1950000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[1516]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:02:35.1410000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[1517]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:02:35.1360000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[1518]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:02:35.1350000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[1519]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:02:35.1350000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[1520]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:02:35.1350000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?10T16:02:33.000000000Z. 

Event[1521]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:02:35.1350000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[1522]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:02:35.1350000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[1523]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:02:35.1350000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[1524]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T16:02:35.1350000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[1525]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T16:02:35.1350000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?10T16:02:34.500000000Z. 

Event[1526]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:01:23.6630000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslb7582772
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{33ED0687-7F3E-4C1F-987A-C2ABFCCDEC44}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1527]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:00:57.1300000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1528]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:00:57.1250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1529]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:00:16.3010000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/847346db-86b8-4523-a48f-81b2525a6879/) to URL group (0xFC00001020000001). Status: 0x0. Process Id 0x1494 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1530]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T16:00:16.3010000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFC00001020000001. Status 0x0. Process Id 0x1494 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1531]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:00:15.3370000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1532]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:00:15.3320000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1533]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:00:15.3320000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1534]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:00:14.5150000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1535]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T16:00:14.5120000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1536]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T16:00:10.7120000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1537]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T16:00:09.7620000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1538]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 24624. 

Event[1539]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 24624. 

Event[1540]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[1541]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[1542]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1543]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1544]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[1545]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[1546]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[1547]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[1548]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[1549]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{e3ce08b3-c82b-11ee-8962-6245b4eb6eb6}" 

Event[1550]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[1551]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[1552]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[1553]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1554]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1555]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[1556]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[1557]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[1558]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[1559]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[1560]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[1561]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[1562]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[1563]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[1564]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[1565]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[1566]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[1567]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[1568]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[1569]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:59:59.3920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[1570]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:59:58.3470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1571]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:59:05.1000000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1572]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:59:05.0980000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1573]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-10T15:59:04.8940000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[1574]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T15:59:00.1580000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1575]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T15:58:56.9760000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[1576]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T15:58:56.7570000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[1577]
  Log Name: System
  Source: TPM
  Date: 2024-02-10T15:58:55.7810000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[1578]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:53.2830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1579]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-10T15:58:51.5160000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_046D&PID_C548&MI_00\8&868D70B&0&0000 with the following status: 0. 

Event[1580]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T15:58:51.2990000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[1581]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-10T15:58:51.1780000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[1582]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:51.1060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x16F4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1583]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:51.1060000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001020000001. Status 0x0. Process Id 0x16F4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1584]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T15:58:51.0980000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[1585]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T15:58:51.0430000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[1586]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1587]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1588]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1589]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1590]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1591]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1592]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1593]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1594]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1595]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1596]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1597]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1598]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1599]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1600]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1601]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1602]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:58:50.9980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1603]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-10T15:58:49.7390000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[1604]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T15:58:49.7330000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1605]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T15:58:49.7330000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[1606]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T15:58:49.7330000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1607]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:49.7270000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1608]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:49.7240000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1609]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:49.7200000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1610]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:49.7190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[1611]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:49.7190000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1612]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:49.7150000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1613]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:49.7070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1614]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:49.7030000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1615]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-10T15:58:49.0260000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffff95006c13b180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\021024-14562-01.dmp. Report Id: 3152e99c-921b-46a4-8256-f18199a2af7a. 

Event[1616]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T15:58:48.9670000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[1617]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T15:58:48.9670000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[1618]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T15:58:48.9640000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[1619]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9570000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1620]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9570000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[1621]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9480000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[1622]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9450000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[1623]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9310000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[1624]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9290000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[1625]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9270000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[1626]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9220000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1627]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9120000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[1628]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.9080000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[1629]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:58:48.8980000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[1630]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T15:58:48.8750000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[1631]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T15:58:48.8750000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[1632]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-10T15:58:47.2430000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[1633]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T15:58:46.3440000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[1634]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:58:45.8800000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[1635]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:58:45.5340000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[1636]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T15:58:44.8880000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[1637]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:58:44.5160000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[1638]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:58:44.2760000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[1639]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-10T15:58:43.2710000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[1640]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T15:58:42.2330000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[1641]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:58:42.0750000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1642]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:58:42.0750000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1643]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:58:42.0120000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1644]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:58:42.0120000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1645]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:58:41.9960000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1646]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:58:41.9810000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[1647]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-10T15:58:41.9810000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[1648]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-10T15:58:41.9180000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[1649]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9250000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1650]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1651]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9230000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1652]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9220000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1653]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1654]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1655]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1656]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1657]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1658]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1659]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9010000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1660]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.9010000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1661]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1662]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8960000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1663]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1664]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1665]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1666]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1667]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1668]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1669]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1670]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1671]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1672]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:58:41.8650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[1673]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T15:58:41.5730000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[1674]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T15:58:41.5610000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[1675]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T15:58:41.5600000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[1676]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:41.5300000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1677]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:41.4400000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1678]
  Log Name: System
  Source: volmgr
  Date: 2024-02-10T15:58:41.4070000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[1679]
  Log Name: System
  Source: volmgr
  Date: 2024-02-10T15:58:41.4070000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[1680]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:58:41.3750000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[1681]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:36.6260000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1682]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:36.6250000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1683]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:58:36.6240000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1684]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T15:58:49.8590000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[1685]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T15:58:49.8590000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[1686]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T15:58:49.8590000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[1687]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T15:58:49.8580000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 15:49:10 on ?10/?02/?2024 was unexpected. 

Event[1688]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-10T15:58:35.1990000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[1689]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T15:58:35.1490000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[1690]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:58:35.1440000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[1691]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:58:35.1440000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[1692]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:58:35.1440000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[1693]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:58:35.1440000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?10T15:58:33.000000000Z. 

Event[1694]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:58:35.1440000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[1695]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:58:35.1430000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[1696]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:58:35.1430000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[1697]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:58:35.1430000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[1698]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T15:58:35.1430000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?10T15:58:34.500000000Z. 

Event[1699]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T15:52:41.6260000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1700]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T15:52:41.6240000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1701]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T15:52:41.6200000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1702]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T15:52:40.5680000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1703]
  Log Name: System
  Source: ACPI
  Date: 2024-02-10T15:52:40.5650000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[1704]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T15:52:35.3800000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1705]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T15:51:45.7830000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl30f31a76
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{33ED0687-7F3E-4C1F-987A-C2ABFCCDEC44}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1706]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:51:32.2110000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/50dfbedf-c184-4d30-9af8-e7d5e7a66972/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x1B50 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1707]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:51:32.2100000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x1B50 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1708]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:51:25.6230000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00001320000001. Status 0x0. Process Id 0x1B50 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1709]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:51:25.6210000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/ad5f9a38-632a-4310-b508-cf91c329fb10/) from URL group (0xFE00001320000001). Process Id 0x1B50 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1710]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:51:20.2780000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1711]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:51:20.2770000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1712]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:50:22.9310000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/ad5f9a38-632a-4310-b508-cf91c329fb10/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x1B50 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1713]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:50:22.9310000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001320000001. Status 0x0. Process Id 0x1B50 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1714]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:50:20.0010000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1715]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:12.9110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[1716]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:50:12.1130000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1717]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:50:12.0900000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1718]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 26792. 

Event[1719]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 26792. 

Event[1720]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[1721]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[1722]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1723]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1724]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[1725]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[1726]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[1727]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[1728]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[1729]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{e3ce08b3-c82b-11ee-8962-6245b4eb6eb6}" 

Event[1730]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[1731]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[1732]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1733]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[1734]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1735]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[1736]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[1737]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[1738]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[1739]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[1740]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[1741]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[1742]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[1743]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[1744]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[1745]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[1746]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[1747]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[1748]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[1749]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:50:10.5670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[1750]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:50:05.6260000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1751]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T15:49:22.1350000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1752]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T15:49:16.6540000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[1753]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T15:49:16.4700000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[1754]
  Log Name: System
  Source: TPM
  Date: 2024-02-10T15:49:14.9800000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[1755]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T15:49:14.9790000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[1756]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:13.1150000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1757]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T15:49:12.1270000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[1758]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:12.0800000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001220000001). Status: 0x0. Process Id 0x1CA4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1759]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:12.0790000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001220000001. Status 0x0. Process Id 0x1CA4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1760]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T15:49:12.0680000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[1761]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1762]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1763]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1764]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1765]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1766]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1767]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1768]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1769]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1770]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1771]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1772]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1773]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1774]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1775]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1776]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1777]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:49:11.9850000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1778]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:49:11.6080000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1779]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:49:11.6070000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1780]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-10T15:49:11.4330000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[1781]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-10T15:49:10.7100000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[1782]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T15:49:10.7030000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1783]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T15:49:10.7030000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[1784]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T15:49:10.7030000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1785]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:10.6670000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1786]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:10.6640000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1787]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:10.6600000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1788]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:10.6600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[1789]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:10.6600000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1790]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:10.6550000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1791]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:10.6490000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1792]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:10.6440000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1793]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T15:49:10.0560000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[1794]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T15:49:10.0560000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[1795]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T15:49:10.0520000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[1796]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:10.0450000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1797]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:10.0440000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[1798]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:10.0330000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[1799]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:10.0300000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[1800]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:10.0160000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[1801]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:10.0140000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[1802]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:10.0130000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[1803]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:10.0070000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1804]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:09.9970000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[1805]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:09.9930000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[1806]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T15:49:09.9790000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[1807]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T15:49:09.9560000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[1808]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T15:49:09.9560000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[1809]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-10T15:49:08.3430000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[1810]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T15:49:07.4510000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[1811]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:49:06.9780000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[1812]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:49:06.6210000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[1813]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:49:05.5950000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[1814]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:49:05.3440000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[1815]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T15:49:03.4140000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[1816]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-10T15:49:01.6490000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[1817]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T15:49:00.9220000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[1818]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:49:00.7590000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1819]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:49:00.7590000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1820]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:49:00.6970000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1821]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:49:00.6970000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1822]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:49:00.6810000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[1823]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T15:49:00.6650000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[1824]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-10T15:49:00.6650000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[1825]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-10T15:49:00.6030000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[1826]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.6100000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1827]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.6090000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1828]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.6080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1829]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.6070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1830]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.6010000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1831]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.6000000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1832]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1833]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 1062
Minimum performance percentage: 45
Minimum throttle percentage: 4 

Event[1834]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1835]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1836]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1837]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1838]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1839]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1840]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1841]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1842]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1843]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1844]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5690000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1845]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1846]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1847]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1848]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1849]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T15:49:00.5490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[1850]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T15:49:00.2450000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[1851]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T15:49:00.2270000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[1852]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T15:49:00.2250000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[1853]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:00.1970000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1854]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:49:00.1070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1855]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T15:49:00.0500000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[1856]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:48:55.3920000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1857]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:48:55.3910000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1858]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T15:48:55.3910000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1859]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T15:49:10.8010000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 18 seconds. 

Event[1860]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T15:49:10.8010000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[1861]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T15:49:10.8010000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[1862]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T15:49:10.8010000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 15:13:20 on ?10/?02/?2024 was unexpected. 

Event[1863]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-10T15:48:53.2020000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[1864]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T15:48:53.1510000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[1865]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:48:53.1450000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[1866]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:48:53.1450000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[1867]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:48:53.1450000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[1868]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:48:53.1450000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?10T15:48:51.000000000Z. 

Event[1869]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:48:53.1450000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was false. 

Event[1870]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:48:53.1450000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[1871]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:48:53.1450000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[1872]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T15:48:53.1450000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[1873]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T15:48:53.1450000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?10T15:48:52.500000000Z. 

Event[1874]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:30:02.5510000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x8A64 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[1875]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:30:02.5370000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x8A64 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[1876]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:30:02.4250000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x8A64 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[1877]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:30:02.4160000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000001). Process Id 0x8A64 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[1878]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:29:47.2470000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x8A64 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[1879]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:29:47.2280000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000001). Process Id 0x8A64 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[1880]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T15:29:42.3620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000001). Status: 0x0. Process Id 0x8A64 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[1881]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T15:29:38.2220000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[1882]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T15:28:36.7460000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[1883]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:25:32.1530000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1884]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T15:17:31.3060000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 13 keys and creating 2 modified pages. 

Event[1885]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T15:16:51.4570000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\MicrosoftTeams_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\5642b34cd579aee4_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[1886]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:16:47.9030000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1887]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:16:42.1580000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1888]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:16:42.1340000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1889]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25364. 

Event[1890]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25364. 

Event[1891]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[1892]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[1893]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1894]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[1895]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[1896]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[1897]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[1898]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[1899]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[1900]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{fe050127-c78a-11ee-895f-6245b4eb6eb6}" 

Event[1901]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[1902]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[1903]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[1904]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1905]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[1906]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[1907]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[1908]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[1909]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[1910]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[1911]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[1912]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[1913]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[1914]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[1915]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[1916]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[1917]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[1918]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[1919]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[1920]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-10T15:16:37.6920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[1921]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:16:36.6780000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1922]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-10T15:15:50.4390000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN__USB&PROD__SANDISK_3.2GEN1&REV_1.00#04013C71CC4BD8F4E183C0211EDA9F17B082DD48BC06E21184DAD7A394B88A0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B} with the following status: 0. 

Event[1923]
  Log Name: System
  Source: Microsoft-Windows-DriverFrameworks-UserMode
  Date: 2024-02-10T15:15:50.4240000Z
  Event ID: 10100
  Task: Installation or update of device drivers. 
  Level: Information  
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The driver package installation has succeeded. 

Event[1924]
  Log Name: System
  Source: Microsoft-Windows-DriverFrameworks-UserMode
  Date: 2024-02-10T15:15:50.4210000Z
  Event ID: 10002
  Task: Installation or update of device drivers. 
  Level: Information  
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The UMDF service WpdFs (CLSID {112de495-ac4c-46f8-b663-6a4266c53313}) was upgraded.  It requires framework version 2.33.0 or higher. 

Event[1925]
  Log Name: System
  Source: Microsoft-Windows-DriverFrameworks-UserMode
  Date: 2024-02-10T15:15:50.4140000Z
  Event ID: 10000
  Task: Installation or update of device drivers. 
  Level: Information  
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A driver package which uses user-mode driver framework version 2.33.0 is being installed on device SWD\WPDBUSENUM\_??_USBSTOR#DISK&VEN__USB&PROD__SANDISK_3.2GEN1&REV_1.00#04013C71CC4BD8F4E183C0211EDA9F17B082DD48BC06E21184DAD7A394B88A0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}. 

Event[1926]
  Log Name: System
  Source: Microsoft-Windows-WPDClassInstaller
  Date: 2024-02-10T15:15:50.5640000Z
  Event ID: 24579
  Task: Driver Post-Install Configuration 
  Level: Information I
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Autoplay registration was skipped for device %1. 

Event[1927]
  Log Name: System
  Source: Microsoft-Windows-WPDClassInstaller
  Date: 2024-02-10T15:15:50.5630000Z
  Event ID: 24577
  Task: Driver Post-Install Configuration 
  Level: Information I
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. 

Event[1928]
  Log Name: System
  Source: Microsoft-Windows-WPDClassInstaller
  Date: 2024-02-10T15:15:50.5300000Z
  Event ID: 24576
  Task: Driver Installation 
  Level: Information l
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Drivers were successfully installed for device WPD Device. 

Event[1929]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:14:48.4460000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1930]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T15:14:48.4400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1931]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-10T15:14:48.0010000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[1932]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T15:14:40.7750000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 3.

Reason InputAccelerometer 

BootId: 32 

Event[1933]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T14:53:21.9430000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason SessionUnlock 

BootId: 32 

Event[1934]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-10T12:03:23.9840000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3522.0) - Current Channel (Broad) 

Event[1935]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T12:03:23.9670000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl5a4f2b9c
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{33ED0687-7F3E-4C1F-987A-C2ABFCCDEC44}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1936]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-10T12:03:19.9640000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3522.0) - Current Channel (Broad) 

Event[1937]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-10T12:03:19.3240000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[1938]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T12:00:00.9690000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 420 seconds. 

Event[1939]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:56:23.7220000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/eaa79aae-f3ba-46a0-b8a7-2e5003d89e08/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x1520 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1940]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:56:23.7210000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001120000001. Status 0x0. Process Id 0x1520 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[1941]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T11:55:54.6410000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl18d21fa6
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{953169B2-FCEC-48DC-9F9C-462AB282DF2B}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1942]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-10T11:55:24.0400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[1943]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:54:19.5500000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[1944]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:54:19.5500000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[1945]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:54:19.5340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[1946]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:54:19.5340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[1947]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:54:19.5340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[1948]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:54:19.5340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[1949]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:54:19.5340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[1950]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:54:19.5340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[1951]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T11:53:31.5550000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[1952]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:23.7550000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1953]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T11:53:23.5830000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[1954]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-10T11:53:23.4300000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[1955]
  Log Name: System
  Source: TPM
  Date: 2024-02-10T11:53:22.6150000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[1956]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-10T11:53:22.6140000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[1957]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T11:53:22.1050000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[1958]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:22.0820000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x16F0 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1959]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:22.0820000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x16F0 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[1960]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-10T11:53:22.0550000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[1961]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1962]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1963]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1964]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1965]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1966]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1967]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1968]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1969]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1970]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1971]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1972]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1973]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1974]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1975]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1976]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1977]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-10T11:53:21.9910000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[1978]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-10T11:53:20.8820000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[1979]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T11:53:20.8760000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1980]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T11:53:20.8760000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[1981]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-10T11:53:20.8760000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[1982]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:20.8400000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1983]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:20.8370000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1984]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:20.8330000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1985]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:20.8330000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[1986]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:20.8330000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1987]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:20.8280000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1988]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:20.8200000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1989]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:20.8160000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[1990]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T11:53:20.6320000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[1991]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T11:53:20.6320000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[1992]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-10T11:53:20.6280000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[1993]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.6200000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[1994]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.6200000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[1995]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.6110000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[1996]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.6070000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[1997]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.5940000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[1998]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.5920000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[1999]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.5910000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[2000]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.5860000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[2001]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.5760000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[2002]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.5720000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[2003]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-10T11:53:20.5570000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[2004]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T11:53:20.4580000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[2005]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-10T11:53:20.4580000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[2006]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-10T11:53:18.4730000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[2007]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T11:53:17.5880000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[2008]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T11:53:16.8960000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[2009]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T11:53:16.5380000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[2010]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T11:53:15.5270000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[2011]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T11:53:11.1700000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[2012]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T11:53:10.6430000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[2013]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-10T11:53:10.1760000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[2014]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-10T11:53:08.7510000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2015]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T11:53:08.5490000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2016]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T11:53:08.5490000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2017]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T11:53:08.4860000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2018]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T11:53:08.4860000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2019]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T11:53:08.4700000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2020]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-10T11:53:08.4540000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[2021]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-10T11:53:08.4540000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[2022]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-10T11:53:08.3920000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[2023]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2024]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2025]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2026]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2027]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2028]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2029]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2030]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2031]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2032]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2033]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2034]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2035]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2036]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2037]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2038]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3640000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2039]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3620000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2040]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2041]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3580000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2042]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3580000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2043]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2044]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2045]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3550000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2046]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-10T11:53:08.3410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[2047]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T11:53:07.7800000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[2048]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T11:53:07.7680000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[2049]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-10T11:53:07.7640000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[2050]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:07.6940000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2051]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:07.5160000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2052]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-10T11:53:07.3600000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[2053]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:02.5720000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2054]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:02.5710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2055]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-10T11:53:02.5700000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2056]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T11:53:20.9680000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 20 seconds. 

Event[2057]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T11:53:20.9680000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[2058]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T11:53:20.9680000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[2059]
  Log Name: System
  Source: EventLog
  Date: 2024-02-10T11:53:20.9680000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 23:14:28 on ?09/?02/?2024 was unexpected. 

Event[2060]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-10T11:53:01.1640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[2061]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T11:53:01.1140000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[2062]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[2063]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[2064]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[2065]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?10T11:53:00.000000000Z. 

Event[2066]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[2067]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[2068]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[2069]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[2070]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[2071]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 29
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows failed fast startup with error status 0xC00000D4. 

Event[2072]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[2073]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-10T11:53:01.1080000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?10T11:53:00.500000000Z. 

Event[2074]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T23:50:46.6200000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[2075]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-02-09T23:50:45.8730000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?02?-?09T23:50:12.047943000Z
Wake Time: ?2024?-?02?-?09T23:50:44.851183300Z

Wake Source: Unknown 

Event[2076]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-09T23:50:45.4410000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[2077]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:50:45.0060000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 6 to 8.

Reason Unknown 

BootId: 31 

Event[2078]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:50:44.8020000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 5 to 6.

Reason SxTransition 

BootId: 31 

Event[2079]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T23:50:44.8020000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[2080]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T23:50:44.8020000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[2081]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T23:50:44.8020000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[2082]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T23:50:44.2010000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2083]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T23:50:43.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?09T23:50:43.500000000Z from ?2024?-?02?-?09T23:50:16.334872500Z.
Time Delta: 27165 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?09T23:50:43.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[2084]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:50:16.3350000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[2085]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T23:50:14.8590000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2086]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:50:12.2600000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[2087]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:50:12.0520000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason Unknown 

BootId: 31 

Event[2088]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:50:12.0480000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[2089]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T23:44:20.5730000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[2090]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-02-09T23:44:19.8030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?02?-?09T23:43:45.422576400Z
Wake Time: ?2024?-?02?-?09T23:44:18.772270100Z

Wake Source: Unknown 

Event[2091]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-09T23:44:19.7380000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[2092]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:44:18.9460000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 2 to 4.

Reason Unknown 

BootId: 31 

Event[2093]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:44:18.7160000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 2.

Reason SxTransition 

BootId: 31 

Event[2094]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T23:44:18.7150000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[2095]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T23:44:18.7150000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[2096]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T23:44:18.7150000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[2097]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T23:44:18.1370000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2098]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T23:44:17.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?09T23:44:17.500000000Z from ?2024?-?02?-?09T23:43:49.783441100Z.
Time Delta: 27716 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?09T23:44:17.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[2099]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:43:49.7830000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[2100]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T23:43:48.2650000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2101]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:43:45.7180000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[2102]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:43:45.4250000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason ScreenOffGracePeriod 

BootId: 31 

Event[2103]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T23:43:45.4220000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[2104]
  Log Name: System
  Source: User32
  Date: 2024-02-09T23:43:44.7210000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The process C:\WINDOWS\system32\winlogon.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
 Reason Code: 0x500ff
 Shut-down Type: power off
 Comment:  

Event[2105]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:16.3640000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{5D37F28C-34EA-4961-B955-D386FA4CB0B7} was reorganized with a starting size of 169750528 bytes and an ending size of 169549824 bytes. 

Event[2106]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:12.3030000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{33BDFC7D-B23A-4E1F-A053-876A58AB277B} was cleared updating 718 keys and creating 84 modified pages. 

Event[2107]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:12.1020000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{30446859-8B80-491F-AF26-0F6747F0E85A} was cleared updating 76 keys and creating 4 modified pages. 

Event[2108]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:12.0180000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{654ABE6E-2418-4A8B-B1D6-069C8280D321} was cleared updating 67 keys and creating 8 modified pages. 

Event[2109]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:11.9860000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{B8F26881-6B6F-46BA-A01E-67D54F67F9CF} was reorganized with a starting size of 21499904 bytes and an ending size of 21467136 bytes. 

Event[2110]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:09.8450000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\WINDOWS\System32\config\DRIVERS (TM: {5643fa7a-c79b-11ee-8960-6245b4eb6eb6}, RM: {5643fa79-c79b-11ee-8960-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[2111]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:09.8160000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\WINDOWS\System32\config\SYSTEM (TM: {5643fa77-c79b-11ee-8960-6245b4eb6eb6}, RM: {5643fa76-c79b-11ee-8960-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[2112]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:09.8060000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\WINDOWS\System32\config\SYSTEM was reorganized with a starting size of 21499904 bytes and an ending size of 21467136 bytes. 

Event[2113]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:02.7430000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\WINDOWS\System32\config\DRIVERS (TM: {5643fa53-c79b-11ee-8960-6245b4eb6eb6}, RM: {5643fa52-c79b-11ee-8960-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[2114]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:46:02.6980000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\WINDOWS\System32\config\SYSTEM (TM: {5643fa50-c79b-11ee-8960-6245b4eb6eb6}, RM: {5643fa4f-c79b-11ee-8960-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[2115]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T22:44:42.3940000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3494.0) - Current Channel (Broad) 

Event[2116]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T22:44:42.3830000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl090b750d
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{953169B2-FCEC-48DC-9F9C-462AB282DF2B}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2117]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T22:44:38.5390000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3494.0) - Current Channel (Broad) 

Event[2118]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T22:44:38.4330000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2119]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T22:37:02.5910000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl65e53d92
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3CAC24D6-33CE-48D4-92DE-3301D75B5FCC}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2120]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:36:32.8810000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/fab3d7bb-9afa-4207-b25a-5f2ca8134e64/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2121]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:36:32.8810000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2122]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:36:32.7350000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00001620000001. Status 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2123]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:36:32.7350000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/02034f74-7f3d-41ac-b660-d702a90f2ae2/) from URL group (0xFE00001620000001). Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2124]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:36:29.6680000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/02034f74-7f3d-41ac-b660-d702a90f2ae2/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2125]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:36:29.6680000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001620000001. Status 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2126]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:35:25.9330000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2127]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:35:25.9330000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2128]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:35:25.9330000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2129]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:35:25.9330000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2130]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:35:25.9330000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2131]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:35:25.9170000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2132]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:35:25.9170000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2133]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:35:25.9170000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2134]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T22:34:38.9530000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2135]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:31.8630000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2136]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-09T22:34:31.3780000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[2137]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-09T22:34:31.2090000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[2138]
  Log Name: System
  Source: TPM
  Date: 2024-02-09T22:34:29.5440000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[2139]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T22:34:29.5430000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[2140]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T22:34:29.4280000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[2141]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.4010000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x17BC Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[2142]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.4010000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000720000001. Status 0x0. Process Id 0x17BC Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[2143]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T22:34:29.3710000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[2144]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2145]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2146]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2147]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2148]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2149]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2150]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2151]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2152]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2153]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2154]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2155]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2156]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2157]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2158]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2159]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2160]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T22:34:29.3070000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2161]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-09T22:34:28.0980000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[2162]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T22:34:28.0910000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[2163]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T22:34:28.0910000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[2164]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T22:34:28.0910000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[2165]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:28.0810000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2166]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:28.0760000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2167]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:28.0710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2168]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:28.0710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[2169]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:28.0710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2170]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:28.0670000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2171]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:28.0570000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2172]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:28.0530000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2173]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T22:34:27.2660000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[2174]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T22:34:27.2660000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[2175]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T22:34:27.2620000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[2176]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2550000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[2177]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2540000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[2178]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2430000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[2179]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2400000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[2180]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2260000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[2181]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2240000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[2182]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2220000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[2183]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2170000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[2184]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2060000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[2185]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.2020000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[2186]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T22:34:27.1870000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[2187]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-09T22:34:27.1630000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[2188]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-09T22:34:27.1630000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[2189]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-09T22:34:25.5660000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[2190]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:34:24.7000000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[2191]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T22:34:24.2340000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[2192]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T22:34:23.9790000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[2193]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T22:34:23.1100000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[2194]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T22:34:17.9020000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[2195]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T22:34:16.9380000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[2196]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-09T22:34:15.8560000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[2197]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T22:34:15.1340000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2198]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T22:34:14.9320000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2199]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T22:34:14.9320000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2200]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T22:34:14.8690000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2201]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T22:34:14.8690000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2202]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T22:34:14.8530000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2203]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T22:34:14.8380000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[2204]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-09T22:34:14.8380000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[2205]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-09T22:34:14.7750000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[2206]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2207]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2208]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2209]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2210]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7760000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2211]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2212]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2213]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2214]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2215]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2216]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7620000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2217]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7620000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2218]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2219]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2220]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7580000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2221]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7570000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2222]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2223]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2224]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7540000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2225]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7540000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2226]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2227]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2228]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2229]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T22:34:14.7370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[2230]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T22:34:14.3370000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[2231]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T22:34:14.3260000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[2232]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T22:34:14.3230000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[2233]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:14.2930000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2234]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:14.2020000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2235]
  Log Name: System
  Source: volmgr
  Date: 2024-02-09T22:34:14.1680000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[2236]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T22:34:14.1310000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[2237]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:09.5450000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2238]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:09.5440000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2239]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T22:34:09.5430000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2240]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T22:34:28.2140000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 20 seconds. 

Event[2241]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T22:34:28.2140000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[2242]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T22:34:28.2140000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[2243]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T22:34:28.2130000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 21:57:28 on ?09/?02/?2024 was unexpected. 

Event[2244]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-09T22:34:08.1370000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[2245]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:34:08.0970000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[2246]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T22:34:08.0910000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[2247]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T22:34:08.0910000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[2248]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T22:34:08.0910000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[2249]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T22:34:08.0910000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?09T22:34:07.000000000Z. 

Event[2250]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T22:34:08.0910000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[2251]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T22:34:08.0910000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[2252]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T22:34:08.0910000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[2253]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T22:34:08.0910000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[2254]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T22:34:08.0910000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?09T22:34:07.500000000Z. 

Event[2255]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T21:24:22.6220000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2256]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T21:22:18.2010000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2257]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:45:12.5870000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2258]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:43:08.2820000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2259]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:40:02.6820000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl4079b3da
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3CAC24D6-33CE-48D4-92DE-3301D75B5FCC}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2260]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:39:30.7970000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2261]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:39:30.7970000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2262]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:39:30.7960000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2263]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:38:36.8790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2264]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:38:28.9630000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2265]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:38:28.9400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2266]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3220000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 26140. 

Event[2267]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3220000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 26140. 

Event[2268]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3220000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[2269]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[2270]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[2271]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[2272]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[2273]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[2274]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[2275]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[2276]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[2277]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{fe050127-c78a-11ee-895f-6245b4eb6eb6}" 

Event[2278]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[2279]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[2280]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[2281]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[2282]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[2283]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[2284]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[2285]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[2286]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[2287]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[2288]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[2289]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[2290]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[2291]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[2292]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[2293]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[2294]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[2295]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[2296]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[2297]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:38:27.3180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[2298]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:38:25.8420000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2299]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:38:25.8420000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2300]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:38:25.8420000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2301]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:38:25.8420000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2302]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:38:25.8270000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2303]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:38:25.8270000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2304]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:38:25.8270000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2305]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:38:25.8270000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2306]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:38:23.8950000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2307]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:37:39.0400000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2308]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-09T20:37:34.4080000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[2309]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:34.3620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/44464abf-6118-4970-980c-fe73d2841b0f/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x17C4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2310]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:34.3620000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x17C4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2311]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-09T20:37:34.1970000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[2312]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T20:37:33.5950000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[2313]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:32.0200000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2314]
  Log Name: System
  Source: TPM
  Date: 2024-02-09T20:37:29.9060000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[2315]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:37:29.9050000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[2316]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T20:37:29.7790000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[2317]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.7500000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000920000001). Status: 0x0. Process Id 0x19B8 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[2318]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.7500000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000920000001. Status 0x0. Process Id 0x19B8 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[2319]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T20:37:29.7310000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[2320]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2321]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2322]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2323]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2324]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2325]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2326]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2327]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2328]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2329]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2330]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2331]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2332]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2333]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2334]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2335]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2336]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:37:29.6500000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2337]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:37:29.4950000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2338]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:37:29.4940000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2339]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-09T20:37:29.3210000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[2340]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-09T20:37:28.6240000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[2341]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T20:37:28.6180000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[2342]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T20:37:28.6180000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[2343]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T20:37:28.6180000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[2344]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:28.6160000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2345]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:28.6130000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2346]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:28.6080000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2347]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:28.6080000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[2348]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:28.6080000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2349]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:28.5980000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2350]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:28.5890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2351]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:28.5850000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2352]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T20:37:27.8370000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[2353]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T20:37:27.8370000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[2354]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T20:37:27.8310000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[2355]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.8240000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[2356]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.8230000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[2357]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.8120000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[2358]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.8090000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[2359]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.7950000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[2360]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.7930000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[2361]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.7920000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[2362]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.7860000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[2363]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.7760000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[2364]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.7720000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[2365]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T20:37:27.7560000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[2366]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-09T20:37:27.7320000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[2367]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-09T20:37:27.7320000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[2368]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-09T20:37:26.1410000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[2369]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T20:37:25.0790000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[2370]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T20:37:24.6110000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[2371]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T20:37:24.3450000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[2372]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T20:37:23.4920000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[2373]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T20:37:20.7120000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[2374]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T20:37:16.9320000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[2375]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-09T20:37:16.7450000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[2376]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T20:37:15.0430000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2377]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:37:14.8410000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2378]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:37:14.8410000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2379]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:37:14.7780000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2380]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:37:14.7780000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2381]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:37:14.7620000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2382]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:37:14.7470000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[2383]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-09T20:37:14.7470000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[2384]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-09T20:37:14.6840000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[2385]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2386]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2387]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2388]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2389]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2390]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2391]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2392]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2393]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6720000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2394]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6710000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2395]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2396]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2397]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6620000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2398]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6620000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2399]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6580000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2400]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6570000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2401]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6530000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2402]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6530000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2403]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2404]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2405]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6480000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2406]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2407]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2408]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T20:37:14.6330000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[2409]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T20:37:14.3370000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[2410]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T20:37:14.3250000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[2411]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:14.2960000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2412]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:14.2060000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2413]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T20:37:14.1490000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[2414]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:09.5560000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2415]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:09.5550000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2416]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T20:37:09.5550000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2417]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-09T20:37:08.1490000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[2418]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T20:37:08.1020000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[2419]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T20:37:08.0970000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[2420]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T20:37:08.0970000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[2421]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T20:37:08.0970000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[2422]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T20:37:08.0970000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?09T20:37:06.000000000Z. 

Event[2423]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T20:37:08.0970000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[2424]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T20:37:08.0970000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[2425]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T20:37:08.0970000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[2426]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T20:37:08.0970000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[2427]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T20:37:08.0970000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?09T20:37:07.500000000Z. 

Event[2428]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T20:36:42.7580000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?02?-?09T20:36:42.758889500Z. 

Event[2429]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T20:36:42.1390000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[2430]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T20:36:41.6780000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Reboot 
Event Code: 0x0 
Reason: Kernel API 

Event[2431]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T20:36:37.8400000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[2432]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T20:36:37.8350000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[2433]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:36:37.6630000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[2434]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:36:37.6630000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[2435]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:36:37.1400000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00001520000001. Status 0x0. Process Id 0x1698 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2436]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:36:37.1390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/9f09aeef-aedb-4953-8d27-f0a3b70af5c9/) from URL group (0xFE00001520000001). Process Id 0x1698 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2437]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T20:37:28.6700000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 21 seconds. 

Event[2438]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T20:37:28.6700000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[2439]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T20:37:28.6690000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[2440]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T20:36:36.7050000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[2441]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T20:36:36.7000000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[2442]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-09T20:36:36.6980000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[2443]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-09T20:36:36.6980000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[2444]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T20:36:36.6970000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[2445]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T20:36:36.6970000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[2446]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:36:36.6630000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[2447]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-09T20:36:36.3090000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[2448]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T20:36:36.7020000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[2449]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[2450]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[2451]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[2452]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[2453]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[2454]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[2455]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[2456]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[2457]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[2458]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[2459]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[2460]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[2461]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[2462]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[2463]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{aad39c1b-c773-11ee-895e-6245b4eb6eb6}" 

Event[2464]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[2465]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[2466]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[2467]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[2468]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T20:36:26.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[2469]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:36:26.5390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[2470]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:36:26.5230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[2471]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:36:26.5050000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2472]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:36:26.3190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[2473]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:36:26.3030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[2474]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T20:36:26.2890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2475]
  Log Name: System
  Source: User32
  Date: 2024-02-09T20:36:25.9750000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the restart of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: restart
 Comment:  

Event[2476]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:24:23.6630000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2477]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:22:06.1430000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2478]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:12:56.8340000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000820000004). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2479]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:12:56.8200000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2480]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:11:02.4650000Z
  Event ID: 7034
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The EaseUS UPDATE SERVICE service terminated unexpectedly. It has done this 1 time(s). 

Event[2481]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:10:52.9550000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000820000004). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2482]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:10:52.9350000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000002). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2483]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:10:52.8290000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000002). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2484]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:10:52.8230000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2485]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:10:48.9010000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2486]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:10:48.8880000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000820000003). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2487]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:10:48.7880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000820000003). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2488]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:10:48.7770000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2489]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:09:32.1440000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2490]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:09:32.1330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000002). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2491]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:09:32.0310000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2492]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:09:32.0240000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001520000002). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2493]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:08:19.5770000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001520000002). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2494]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:08:19.5570000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000005). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2495]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:08:19.4480000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000005). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2496]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:08:19.4340000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001520000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2497]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:07:11.0640000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001520000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2498]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:07:11.0530000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2499]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:07:10.9370000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2500]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T20:07:02.5060000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\IntelIHVRouter14.dll
 

Event[2501]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T20:07:02.4350000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[2502]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:07:02.4170000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2503]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:07:02.4170000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2504]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:07:02.3600000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2505]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:07:02.3590000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2506]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:07:02.3390000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2507]
  Log Name: System
  Source: Netwtw14
  Date: 2024-02-09T20:07:02.3340000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP19 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[2508]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T20:07:02.1860000Z
  Event ID: 8000
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2509]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:06:59.1320000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ___ Intel(R) Wireless Adapter Driver for Windows 10 - 64 Bit
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_676bed065e3f9992\Netwtw14.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2510]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-02-09T20:06:49.6360000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\audiodg.exe with process id 4344 stopped the removal or ejection for the device USB\VID_8087&PID_0032\5&2cf64626&0&14.
Process command line: C:\WINDOWS\system32\AUDIODG.EXE 0x000000000000072C
List of affected devices:
BTHENUM\{0000110b-0000-1000-8000-00805f9b34fb}_VID&0002054c_PID&0df0\7&2649c9e0&0&88C9E8D3881A_C00000000
 

Event[2511]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T20:06:37.7280000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[2512]
  Log Name: System
  Source: e2fnexpress
  Date: 2024-02-09T20:06:34.8960000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2513]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:06:34.7070000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2514]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-09T20:06:34.5520000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2515]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:06:33.5140000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Intel(R) PCI Express Network Connection NetAdapter Driver
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\e2fn.inf_amd64_7207451d1e71d816\e2fn.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2516]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-09T20:06:15.8350000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[2517]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-09T20:06:15.7700000Z
  Event ID: 4
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Intel(R) Management Engine Interface is being disabled. 

Event[2518]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:06:06.6580000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2519]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:06:06.6510000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000004). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2520]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:06:06.5500000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000004). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2521]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:06:06.5400000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2522]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T20:06:03.9770000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy4) is healthy.  No action is needed. 

Event[2523]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:05:06.3350000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2524]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:05:06.3220000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2525]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:05:06.2150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2526]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:05:06.2000000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000003). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2527]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:03:30.7930000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000003). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2528]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:03:30.7670000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000002). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2529]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T20:03:25.8700000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2530]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T20:03:21.7500000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2531]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T19:30:41.9390000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2532]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T19:17:38.7250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[2533]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T19:13:37.9390000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2534]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T18:56:33.9390000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2535]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T18:39:29.9410000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2536]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T18:26:04.2120000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2537]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T18:24:00.1300000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2538]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T18:22:09.9620000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[2539]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T18:22:09.9360000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2540]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T18:21:45.8420000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[2541]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T18:02:33.0670000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2542]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T18:01:15.2720000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2543]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T18:01:15.2480000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2544]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T18:01:00.1430000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslb20a3155
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3CAC24D6-33CE-48D4-92DE-3301D75B5FCC}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2545]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T18:01:00.0290000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3482.0) - Current Channel (Broad) 

Event[2546]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T18:00:55.8550000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3482.0) - Current Channel (Broad) 

Event[2547]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T18:00:46.5980000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2548]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:59:11.4330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2549]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:59:11.4100000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2550]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:59:11.2960000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2551]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:59:11.2820000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2552]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:58:27.2460000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2553]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:58:27.2210000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000820000002). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2554]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:58:27.1100000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000820000002). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2555]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:58:27.1050000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2556]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:58:07.9260000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2557]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:58:07.9080000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000820000001). Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2558]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:58:03.0220000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000820000001). Status: 0x0. Process Id 0x3968 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2559]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T17:57:58.9020000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2560]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T17:53:54.6220000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2561]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T17:53:28.2450000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2562]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T17:53:24.1790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2563]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T17:53:24.1570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2564]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 24936. 

Event[2565]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 24936. 

Event[2566]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[2567]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[2568]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[2569]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[2570]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[2571]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[2572]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[2573]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[2574]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[2575]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{aad39c1b-c773-11ee-895e-6245b4eb6eb6}" 

Event[2576]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[2577]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[2578]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[2579]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[2580]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[2581]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[2582]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[2583]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[2584]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[2585]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[2586]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[2587]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[2588]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[2589]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[2590]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[2591]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[2592]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[2593]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[2594]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[2595]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-09T17:53:22.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[2596]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T17:53:18.7810000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2597]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T17:53:08.8700000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl902e27fb
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{CE7155F1-7E02-4C8F-A656-993782EEB73A}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2598]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T17:52:57.3000000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\Settings\settings.dat was cleared updating 28 keys and creating 5 modified pages. 

Event[2599]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T17:51:50.2610000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2600]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:51:47.8430000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/9f09aeef-aedb-4953-8d27-f0a3b70af5c9/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x1698 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2601]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:51:47.8430000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001520000001. Status 0x0. Process Id 0x1698 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2602]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T17:51:47.6000000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2603]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T17:51:47.5980000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2604]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-09T17:51:47.2860000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[2605]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:51:29.0680000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2606]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:51:29.0680000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2607]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:51:29.0680000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2608]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:51:29.0680000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2609]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:51:29.0530000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2610]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:51:29.0530000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2611]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:51:29.0530000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2612]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:51:29.0530000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2613]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T17:50:45.7050000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2614]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-09T17:50:41.4010000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[2615]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-09T17:50:41.2420000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[2616]
  Log Name: System
  Source: TPM
  Date: 2024-02-09T17:50:40.7150000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[2617]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:38.5930000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2618]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T17:50:36.5240000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[2619]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-09T17:50:36.5040000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[2620]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T17:50:36.4120000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[2621]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.3810000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x14A8 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[2622]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.3810000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000820000001. Status 0x0. Process Id 0x14A8 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[2623]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T17:50:36.3540000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[2624]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2625]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2626]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2627]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2628]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2629]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2630]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2631]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2632]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2633]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2634]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2635]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2636]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2637]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2638]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2639]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2640]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T17:50:36.2880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2641]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-09T17:50:34.1290000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[2642]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T17:50:34.1160000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[2643]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T17:50:34.1160000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[2644]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T17:50:34.1160000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[2645]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:34.0200000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2646]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:34.0100000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2647]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:34.0010000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2648]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:34.0010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[2649]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:34.0010000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2650]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:33.9940000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2651]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:33.9340000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2652]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:33.9320000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2653]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-09T17:50:32.9230000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffffcf013b159180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\020924-23453-01.dmp. Report Id: 4bd5a342-2914-4a90-b0dc-fc30f468ce91. 

Event[2654]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T17:50:32.7210000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[2655]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T17:50:32.7210000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[2656]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T17:50:32.7100000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[2657]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.7030000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[2658]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.7030000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[2659]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.6930000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[2660]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.6900000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[2661]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.6770000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[2662]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.6760000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[2663]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.6740000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[2664]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.6690000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[2665]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.6580000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[2666]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.6550000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[2667]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T17:50:32.6440000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[2668]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-09T17:50:32.6200000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[2669]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-09T17:50:32.6200000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[2670]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-09T17:50:30.9470000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[2671]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T17:50:30.0800000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[2672]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T17:50:29.4020000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[2673]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T17:50:29.0460000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[2674]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T17:50:27.9840000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[2675]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T17:50:27.8640000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[2676]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-09T17:50:20.7140000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[2677]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-09T17:50:19.6660000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[2678]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-09T17:50:18.2410000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2679]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T17:50:18.0670000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2680]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T17:50:18.0670000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2681]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T17:50:18.0050000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2682]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T17:50:18.0050000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2683]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T17:50:17.9890000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2684]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T17:50:17.9730000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[2685]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-09T17:50:17.9730000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[2686]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-09T17:50:17.9110000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[2687]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2688]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2689]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9170000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2690]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9160000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2691]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9090000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2692]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2693]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2694]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2695]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9000000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2696]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.9000000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2697]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8960000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2698]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2699]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2700]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2701]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2702]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2703]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2704]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2705]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2706]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2707]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2708]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2709]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2710]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T17:50:17.8600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[2711]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T17:50:17.2870000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[2712]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T17:50:17.2760000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[2713]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T17:50:17.2650000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[2714]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:17.1980000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2715]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:17.0150000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2716]
  Log Name: System
  Source: volmgr
  Date: 2024-02-09T17:50:16.9390000Z
  Event ID: 162
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file generation succeded. 

Event[2717]
  Log Name: System
  Source: volmgr
  Date: 2024-02-09T17:50:16.9230000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[2718]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T17:50:16.8340000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[2719]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:11.5550000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2720]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:11.5540000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2721]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T17:50:11.5540000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2722]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T17:50:34.5270000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 25 seconds. 

Event[2723]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T17:50:34.5270000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[2724]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T17:50:34.5270000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[2725]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T17:50:34.5260000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 17:26:12 on ?09/?02/?2024 was unexpected. 

Event[2726]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-09T17:50:10.1390000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[2727]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T17:50:10.0940000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[2728]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T17:50:10.0890000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[2729]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T17:50:10.0890000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[2730]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T17:50:10.0890000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[2731]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T17:50:10.0890000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?09T17:50:09.000000000Z. 

Event[2732]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T17:50:10.0890000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[2733]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T17:50:10.0890000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[2734]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T17:50:10.0890000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[2735]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T17:50:10.0890000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[2736]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T17:50:10.0890000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?09T17:50:09.500000000Z. 

Event[2737]
  Log Name: System
  Source: ACPI
  Date: 2024-02-09T17:48:38.4890000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[2738]
  Log Name: System
  Source: ACPI
  Date: 2024-02-09T17:48:35.5940000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[2739]
  Log Name: System
  Source: ACPI
  Date: 2024-02-09T17:48:34.0440000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[2740]
  Log Name: System
  Source: ACPI
  Date: 2024-02-09T17:48:34.0420000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[2741]
  Log Name: System
  Source: ACPI
  Date: 2024-02-09T17:48:34.0390000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[2742]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T17:48:27.9310000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2743]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T14:36:40.7110000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000003). Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2744]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T14:36:40.7060000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2745]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T14:34:20.8330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000003). Status: 0x0. Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2746]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T14:34:20.8260000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000002). Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2747]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T14:34:20.7200000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000002). Status: 0x0. Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2748]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T14:34:20.7120000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2749]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T14:34:13.5040000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2750]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T14:34:13.4980000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2751]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T14:34:08.6260000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2752]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T14:34:04.4960000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2753]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:59:55.0000000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NMPJ99VJBWV-Microsoft.YourPhone. 

Event[2754]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:59:54.7270000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone 

Event[2755]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:59:54.0250000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2756]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:29.2050000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9N0DX20HK701-Microsoft.WindowsTerminal. 

Event[2757]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:29.0480000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9N0DX20HK701-Microsoft.WindowsTerminal 

Event[2758]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T12:30:28.4530000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.18.10301.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[2759]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:28.2890000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9MV0B5HZVK9Z-Microsoft.GamingApp. 

Event[2760]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:28.0710000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MV0B5HZVK9Z-Microsoft.GamingApp 

Event[2761]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T12:30:26.7390000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GamingApp_2401.1001.10.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[2762]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:21.4900000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NCTDW2W1BH8-Microsoft.RawImageExtension 

Event[2763]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T12:30:21.1900000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.RawImageExtension_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[2764]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:21.0820000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NCTDW2W1BH8-Microsoft.RawImageExtension 

Event[2765]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:18.4740000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2766]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:16.8300000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS 

Event[2767]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:15.6840000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS 

Event[2768]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T12:30:14.6020000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_16005.14326.21806.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[2769]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:13.2500000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2770]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:11.8060000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVN5-MICROSOFT.WINDOWSCALCULATOR 

Event[2771]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T12:30:11.4400000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[2772]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:11.2790000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFHVN5-MICROSOFT.WINDOWSCALCULATOR 

Event[2773]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T12:30:10.5750000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_11.2311.0.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[2774]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:30:03.7500000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2775]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:57.7660000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos 

Event[2776]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:55.3800000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos 

Event[2777]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T12:29:52.9610000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2024.11010.23003.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[2778]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:31.4700000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2779]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:30.2770000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NG1H8B3ZC7M-Microsoft.MixedReality.Portal 

Event[2780]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:28.9980000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2781]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:26.8770000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH10PG8-MICROSOFT.PEOPLE 

Event[2782]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:26.8770000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2783]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:26.5480000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9PKDZBMV1H3T-Microsoft.GetHelp 

Event[2784]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:22.7960000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2785]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:21.6020000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9P086NHDNB9W-Microsoft.XboxSpeechtoTextOverlay 

Event[2786]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:17.8070000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2787]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:17.8070000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2788]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T12:29:17.8070000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2789]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T12:12:12.1960000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2790]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T12:00:00.6290000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 9254 seconds. 

Event[2791]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T11:55:08.1930000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2792]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T11:38:04.1930000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2793]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T11:26:09.1840000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[2794]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T11:26:09.1840000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\User.dat was cleared updating 7 keys and creating 1 modified pages. 

Event[2795]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T11:21:00.1950000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2796]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T11:07:38.5370000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2797]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T11:05:34.4650000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2798]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T11:03:40.2010000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[2799]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-09T11:03:40.1890000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[2800]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T11:03:17.6330000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather 

Event[2801]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T11:03:17.0200000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[2802]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T11:03:16.7850000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather 

Event[2803]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T11:03:15.4170000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingWeather_4.53.52331.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[2804]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T11:02:31.1050000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[2805]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T09:36:33.3830000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl2cf27f49
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{CE7155F1-7E02-4C8F-A656-993782EEB73A}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2806]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T09:36:33.3430000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3463.0) - Current Channel (Broad) 

Event[2807]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T09:36:29.2010000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3463.0) - Current Channel (Broad) 

Event[2808]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:36:28.6900000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2809]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T09:36:28.6750000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2810]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T09:36:28.0030000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2811]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:34:13.5500000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2812]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:34:13.5430000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000001). Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2813]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:34:08.6990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x1930 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[2814]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T09:34:04.5400000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2815]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T09:33:14.3290000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2816]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T09:32:50.1520000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 3.

Reason InputAccelerometer 

BootId: 28 

Event[2817]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T09:28:49.2200000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslf7778b41
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FD0420C6-3C4E-4404-8C2F-CBBAE17D28FD}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2818]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:28:31.7210000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.24012.86.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[2819]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:28:29.2890000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/bfff4740-5e3d-42e0-8d5b-2fe3689d53bc/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x1D90 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2820]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:28:29.2880000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001520000001. Status 0x0. Process Id 0x1D90 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2821]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:28:29.1920000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0x1D90 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2822]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:28:29.1920000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/5fc15019-2b8d-4f84-b1cb-e21f1fa4954e/) from URL group (0xFE00000720000001). Process Id 0x1D90 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2823]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T09:28:19.5510000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2824]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T09:28:01.9170000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason SessionUnlock 

BootId: 28 

Event[2825]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-09T09:27:41.8280000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2826]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T09:27:09.6030000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logi Options+
Service File Name:  "C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe" --run-as-service
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[2827]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:27:05.9390000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2828]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:27:05.9390000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2829]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:27:05.9390000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2830]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:27:05.9390000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2831]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:27:05.9230000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2832]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:27:05.9230000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2833]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:27:05.9230000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2834]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:27:05.9230000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[2835]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T09:26:26.3370000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2836]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-09T09:26:21.3760000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[2837]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-09T09:26:21.1870000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[2838]
  Log Name: System
  Source: TPM
  Date: 2024-02-09T09:26:18.3600000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[2839]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-09T09:26:18.3600000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[2840]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:26:17.6430000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2841]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:17.4540000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/5fc15019-2b8d-4f84-b1cb-e21f1fa4954e/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x1D90 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2842]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:17.4540000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000720000001. Status 0x0. Process Id 0x1D90 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[2843]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T09:26:16.0870000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[2844]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:16.0630000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x1F10 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[2845]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:16.0630000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001020000001. Status 0x0. Process Id 0x1F10 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[2846]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:16.0430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\WindowsApps\Microsoft.GamingServices_17.85.5002.0_x64__8wekyb3d8bbwe\Cache\614c1dd4fa20d05a_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[2847]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-09T09:26:16.0260000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[2848]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2849]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2850]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2851]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2852]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2853]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2854]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2855]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2856]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2857]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2858]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2859]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2860]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2861]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2862]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2863]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2864]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-09T09:26:15.9730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[2865]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:15.5280000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve was cleared updating 11072 keys and creating 3974 modified pages. 

Event[2866]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T09:26:15.2080000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
 and APPID 
{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2867]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T09:26:14.6680000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2868]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-09T09:26:14.6670000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[2869]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-09T09:26:14.2730000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[2870]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-09T09:26:12.3310000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[2871]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T09:26:12.3200000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[2872]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T09:26:12.3190000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[2873]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-09T09:26:12.3190000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[2874]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:26:12.2130000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2875]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:26:12.2060000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2876]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:26:12.1990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2877]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:26:12.1990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[2878]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:26:12.1990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2879]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:26:12.1900000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2880]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:12.1720000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\bbimigrate\BBI was cleared updating 1 keys and creating 1 modified pages. 

Event[2881]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:26:12.1440000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2882]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:26:12.1410000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2883]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:12.0900000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 426 keys and creating 92 modified pages. 

Event[2884]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:11.9260000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 171 keys and creating 19 modified pages. 

Event[2885]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:11.0260000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 187 keys and creating 27 modified pages. 

Event[2886]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T09:26:10.8490000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[2887]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T09:26:10.8490000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[2888]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-09T09:26:10.8310000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[2889]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.7980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[2890]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.7980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[2891]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.7560000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[2892]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.7410000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[2893]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.6950000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[2894]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.6820000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[2895]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.6770000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[2896]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.6530000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[2897]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.6000000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[2898]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.5810000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[2899]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-09T09:26:10.5000000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[2900]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-09T09:26:10.4140000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[2901]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-09T09:26:10.4130000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[2902]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-09T09:26:08.7410000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[2903]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:07.8710000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[2904]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:07.8260000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 169816064 bytes and an ending size of 169656320 bytes. 

Event[2905]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:06.0800000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 88 keys and creating 5 modified pages. 

Event[2906]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:06.0780000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 726 keys and creating 84 modified pages. 

Event[2907]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:26:06.0760000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 67 keys and creating 8 modified pages. 

Event[2908]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T09:26:06.0530000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[2909]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T09:26:05.6800000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[2910]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T09:26:01.0570000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[2911]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T09:26:00.8470000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[2912]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-09T09:25:57.5500000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[2913]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-09T09:25:55.8170000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[2914]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-09T09:25:55.1140000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[2915]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T09:25:54.9380000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2916]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T09:25:54.9380000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2917]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T09:25:54.8750000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2918]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T09:25:54.8750000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2919]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T09:25:54.8590000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[2920]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-09T09:25:54.8440000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[2921]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-09T09:25:54.8440000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[2922]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-09T09:25:54.7810000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[2923]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2924]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2925]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2926]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2927]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2928]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2929]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2930]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7760000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[2931]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2932]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2933]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2934]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2935]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2936]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2937]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2938]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2939]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2940]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2941]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2942]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2943]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7450000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2944]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7450000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2945]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7440000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[2946]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-09T09:25:54.7300000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[2947]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T09:25:54.1520000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[2948]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T09:25:54.1400000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[2949]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-09T09:25:54.1350000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[2950]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:25:54.0680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2951]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:25:53.8750000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2952]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-09T09:25:53.7110000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[2953]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:25:48.7690000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2954]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:25:48.7680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2955]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-09T09:25:48.7670000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[2956]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-09T09:25:47.3430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[2957]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:25:47.2900000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[2958]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2850000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[2959]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2850000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[2960]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2850000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[2961]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2850000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?09T09:25:45.000000000Z. 

Event[2962]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2850000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[2963]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2840000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[2964]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2840000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[2965]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2840000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[2966]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2840000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[2967]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2840000Z
  Event ID: 29
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows failed fast startup with error status 0xC00000D4. 

Event[2968]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-09T09:25:47.2840000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[2969]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T09:26:12.6290000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 26 seconds. 

Event[2970]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T09:26:12.6290000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[2971]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T09:26:12.6290000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[2972]
  Log Name: System
  Source: EventLog
  Date: 2024-02-09T09:26:12.6280000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 22:54:43 on ?08/?02/?2024 was unexpected. 

Event[2973]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-09T09:25:47.2840000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?09T09:25:46.500000000Z. 

Event[2974]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[2975]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[2976]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[2977]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[2978]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[2979]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[2980]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[2981]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[2982]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[2983]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[2984]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" 

Event[2985]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[2986]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[2987]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[2988]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{0ca5ae9a-c534-11ee-895c-6245b4eb6eb6}" 

Event[2989]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[2990]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca3-31dd-9bac-2041830 

Event[2991]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[2992]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T23:27:18.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[2993]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T23:19:03.5950000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[2994]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T23:16:52.6670000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[2995]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T22:50:28.5530000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl56e31fe6
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FD0420C6-3C4E-4404-8C2F-CBBAE17D28FD}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[2996]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-08T22:50:28.5140000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3434.0) - Current Channel (Broad) 

Event[2997]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-08T22:50:23.5610000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3434.0) - Current Channel (Broad) 

Event[2998]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-08T22:50:21.7370000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[2999]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T21:12:04.9970000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3000]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T21:10:00.7060000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3001]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T20:06:12.0090000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000003). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3002]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T20:06:11.9920000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3003]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T20:04:04.9110000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3004]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T20:04:04.9030000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000002). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3005]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T20:04:00.0310000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000002). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3006]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T20:03:55.9000000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3007]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T18:00:26.9930000Z
  Event ID: 7034
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The EaseUS UPDATE SERVICE service terminated unexpectedly. It has done this 1 time(s). 

Event[3008]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:43:25.1790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3009]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T17:43:25.1720000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3010]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:41:17.2760000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3011]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:41:17.2690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3012]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:41:17.1710000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3013]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:41:17.1660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3014]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:40:57.9780000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3015]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:40:57.9670000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3016]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:40:53.1010000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3017]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T17:40:48.9570000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3018]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:08:10.6600000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_046D&PID_C548&MI_00\8&2318791C&0&0000 with the following status: 0. 

Event[3019]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:52.6970000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL01\B&EF05F89&0&0000 with the following status: 0. 

Event[3020]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:52.6850000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL01\B&EF05F89&0&0000 with the following status: 0. 

Event[3021]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:52.6810000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL01\B&EF05F89&0&0000 with the following status: 0. 

Event[3022]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:52.4980000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL04\B&EF05F89&0&0003 with the following status: 0. 

Event[3023]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:47.5450000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL03\B&EF05F89&0&0002 with the following status: 0. 

Event[3024]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:47.4000000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\B&EF05F89&0&0001 with the following status: 0. 

Event[3025]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:47.3970000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\B&EF05F89&0&0001 with the following status: 0. 

Event[3026]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:47.3930000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LMouFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\B&EF05F89&0&0001 with the following status: 0. 

Event[3027]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:47.3910000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\B&EF05F89&0&0001 with the following status: 0. 

Event[3028]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:47.2510000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL01\B&19A395C&0&0000 with the following status: 0. 

Event[3029]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:47.2480000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL01\B&19A395C&0&0000 with the following status: 0. 

Event[3030]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:47.2450000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL01\B&19A395C&0&0000 with the following status: 0. 

Event[3031]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:46.9020000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\B&19A395C&0&0001 with the following status: 0. 

Event[3032]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:46.8990000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\B&19A395C&0&0001 with the following status: 0. 

Event[3033]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:46.8950000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LMouFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\B&19A395C&0&0001 with the following status: 0. 

Event[3034]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:46.8930000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\B&19A395C&0&0001 with the following status: 0. 

Event[3035]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:46.6640000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidEqd for Device Instance ID {A3535E08-EB26-49A9-8AE0-786ED1242812}\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E\A&1B1281C0&0&02 with the following status: 0. 

Event[3036]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:46.5890000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidEqd for Device Instance ID {A3535E08-EB26-49A9-8AE0-786ED1242812}\VID_046D&PID_C52B&REV_1211&MI_02\A&1B1281C0&0&00 with the following status: 0. 

Event[3037]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:46.4500000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidEqd for Device Instance ID {A3535E08-EB26-49A9-8AE0-786ED1242812}\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006\A&1B1281C0&0&01 with the following status: 0. 

Event[3038]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:46.3390000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LEqdUsb for Device Instance ID USB\VID_046D&PID_C52B&MI_02\9&FE79073&0&0002 with the following status: 0. 

Event[3039]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T17:06:46.2800000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  LNonPnP
Service File Name:  C:\WINDOWS\System32\Drivers\LNonPnP.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3040]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T17:06:46.1710000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_046D&PID_C52B&MI_00\9&FE79073&0&0000 with the following status: 0. 

Event[3041]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:02:54.4070000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/7e410119-2da6-4374-8666-8f98a565cf47/) to URL group (0xFE00001320000002). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3042]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:02:54.4060000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001320000002. Status 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3043]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:01:11.7120000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00000620000003. Status 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3044]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:01:11.7120000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/ac51c9aa-ebc7-44c8-88c5-44fe72d89cb5/) from URL group (0xFE00000620000003). Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3045]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:00:56.7230000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/ac51c9aa-ebc7-44c8-88c5-44fe72d89cb5/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3046]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:00:56.7220000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000620000003. Status 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3047]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:00:47.5630000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00000720000001. Status 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3048]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:00:47.5620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/8ff1f63e-f32f-4f03-bee1-1ff4785ac6b8/) from URL group (0xFE00000720000001). Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3049]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:00:32.9820000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/8ff1f63e-f32f-4f03-bee1-1ff4785ac6b8/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3050]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:00:32.9820000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000720000001. Status 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3051]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:00:12.8730000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00000420000001. Status 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3052]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T17:00:12.8720000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/f090a2db-7288-4c9c-a5c8-ac868b09d6ee/) from URL group (0xFE00000420000001). Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3053]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T15:06:28.0970000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3054]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T15:06:28.0870000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3055]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T15:04:16.2320000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3056]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T15:04:16.2260000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3057]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T15:04:16.1110000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3058]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T15:04:16.1060000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3059]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T15:04:04.9000000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3060]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T15:04:04.8900000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3061]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T15:04:00.0060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3062]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T15:03:55.8860000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3063]
  Log Name: System
  Source: EventLog
  Date: 2024-02-08T12:00:00.8410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 139817 seconds. 

Event[3064]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-02-08T11:09:51.0390000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service arturiausbmidiks for Device Instance ID TUSBAUDIO_ENUM\VID_1C75&PID_020B&KS\7030400532135681 with the following status: 0. 

Event[3065]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T11:09:51.0360000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  arturiausbmidiks
Service File Name:  \SystemRoot\system32\DRIVERS\arturiausbmidiks.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3066]
  Log Name: System
  Source: arturiausbmidi
  Date: 2024-02-08T11:09:50.8560000Z
  Event ID: 3
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Audio Controller initialization failed. 

Event[3067]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T11:09:50.5850000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  arturiausbmidi
Service File Name:  \SystemRoot\System32\drivers\arturiausbmidi.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3068]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T11:09:04.0300000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The arturiausbmidi_cci_{0E7DA97F-904F-40D0-B63A-08865885CF65} service failed to start due to the following error: 
A device attached to the system is not functioning. 

Event[3069]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T11:09:04.0100000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  arturiausbmidi_cci_{0E7DA97F-904F-40D0-B63A-08865885CF65}
Service File Name:  C:\Program Files\Arturia\USBMidiDriver\W10_x64\arturiausbmidi.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3070]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T11:01:06.4790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3071]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T11:01:06.4720000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3072]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:59:02.6000000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3073]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:59:02.5910000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3074]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:59:02.4890000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3075]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:59:02.4790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000002). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3076]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:58:46.4780000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000002). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3077]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:58:46.4710000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3078]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:58:46.3740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3079]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:58:46.3680000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3080]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:58:42.4220000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3081]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:58:42.4110000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3082]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:58:42.3130000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3083]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:58:42.3050000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3084]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:57:54.9620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3085]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:57:54.9530000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3086]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-08T10:57:50.0850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x24A8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3087]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T10:57:45.9470000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3088]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-08T10:14:14.6280000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[3089]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-08T10:14:14.6260000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[3090]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T10:12:20.1910000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl77e25c76
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9157F302-D0DC-45E6-BB05-B8883ED608FE}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3091]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-08T10:12:20.1510000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3409.0) - Current Channel (Broad) 

Event[3092]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-08T10:12:15.7450000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3409.0) - Current Channel (Broad) 

Event[3093]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-08T10:12:00.2710000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[3094]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T10:10:01.6380000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3095]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-08T10:09:34.8950000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[3096]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T10:07:50.8770000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3097]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T10:04:04.6020000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3098]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-08T10:03:13.7750000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3099]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-08T10:02:44.6940000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3100]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:34.6790000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[3101]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 7272. 

Event[3102]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 7272. 

Event[3103]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[3104]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[3105]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[3106]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[3107]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[3108]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[3109]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[3110]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[3111]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{0ca5ae9a-c534-11ee-895c-6245b4eb6eb6}" 

Event[3112]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[3113]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[3114]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[3115]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[3116]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[3117]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[3118]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[3119]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca3-31dd-9ba 

Event[3120]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 2; device name: \Volume{234e3a45-fca3-31dd-9bac-204183070f1e}. 

Event[3121]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[3122]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca3-31dd-9bac-204183070f1e}" created 

Event[3123]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[3124]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[3125]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[3126]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[3127]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[3128]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 2l 

Event[3129]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[3130]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[3131]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-08T10:02:32.3830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[3132]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-08T10:02:31.9680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[3133]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-08T10:02:30.4400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3134]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-08T10:02:00.1610000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3135]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-08T10:01:53.5240000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[3136]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-08T10:01:53.4680000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3137]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-08T10:01:53.4640000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3138]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-02-08T10:01:52.9820000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?02?-?06T23:37:06.773215200Z
Wake Time: ?2024?-?02?-?08T10:01:51.821877900Z

Wake Source: Unknown 

Event[3139]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-08T10:01:52.7430000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[3140]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-08T10:01:52.6590000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[3141]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-08T10:01:51.9670000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 2 to 4.

Reason Unknown 

BootId: 27 

Event[3142]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-08T10:01:51.7660000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 2.

Reason SxTransition 

BootId: 27 

Event[3143]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-08T10:01:51.7650000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[3144]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-08T10:01:51.7650000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[3145]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-08T10:01:51.7650000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[3146]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-08T10:01:51.0790000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[3147]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-08T10:01:50.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?08T10:01:50.500000000Z from ?2024?-?02?-?06T23:37:12.830962000Z.
Time Delta: 123877669 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?08T10:01:50.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[3148]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T23:37:12.8310000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[3149]
  Log Name: System
  Source: EventLog
  Date: 2024-02-08T10:01:50.8410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 132727 seconds. 

Event[3150]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T23:37:07.9290000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[3151]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T23:37:07.0150000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[3152]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T23:37:06.7760000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason ScreenOffGracePeriod 

BootId: 27 

Event[3153]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T23:37:06.7730000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[3154]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-06T23:37:06.2860000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[3155]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[3156]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[3157]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[3158]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[3159]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3160]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3161]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[3162]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[3163]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[3164]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[3165]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[3166]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[3167]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{ec8507d5-c41f-11ee-8958-6245b4eb6eb6}" 

Event[3168]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[3169]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[3170]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[3171]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[3172]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[3173]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[3174]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T23:37:04.7990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[3175]
  Log Name: System
  Source: User32
  Date: 2024-02-06T23:37:00.9060000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: power off
 Comment:  

Event[3176]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T22:10:23.8190000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy3) is healthy.  No action is needed. 

Event[3177]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T21:40:21.8220000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 7 keys and creating 2 modified pages. 

Event[3178]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:24:58.5870000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[3179]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:19:17.1740000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3180]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:17:12.8740000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3181]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:16:03.5620000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3182]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:14:47.1760000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3183]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:12:43.0510000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3184]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:12:39.6570000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl5b0e0bde
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{651FD3F7-1AAA-4CFE-96ED-A365241BCFB4}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3185]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:12:08.4800000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3186]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:12:08.4800000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3187]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:12:08.4800000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3188]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:11:49.1370000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3189]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:11:48.9090000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3190]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:11:48.1050000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3191]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:11:48.1040000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3192]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:11:48.0990000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3193]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:11:43.1440000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3194]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:11:27.9220000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3195]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:11:14.8300000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3196]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:11:14.8070000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3197]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4230000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25620. 

Event[3198]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4230000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25620. 

Event[3199]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4230000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[3200]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4220000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[3201]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4220000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[3202]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[3203]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{ec8507d5-c41f-11ee-8958-6245b4eb6eb6}" 

Event[3204]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[3205]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[3206]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[3207]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[3208]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[3209]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3210]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3211]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[3212]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[3213]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[3214]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[3215]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[3216]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[3217]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[3218]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[3219]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[3220]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[3221]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[3222]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[3223]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[3224]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[3225]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T21:11:10.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[3226]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:11:09.1250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3227]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:11:02.8870000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3228]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:11:02.8870000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3229]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:11:02.8870000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3230]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:11:02.8870000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3231]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:11:02.8720000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3232]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:11:02.8720000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3233]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:11:02.8720000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3234]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:11:02.8720000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3235]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:16.6570000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/f090a2db-7288-4c9c-a5c8-ac868b09d6ee/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3236]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:16.6570000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3237]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:10:16.5450000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3238]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:10:15.8890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3239]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:10:15.8880000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3240]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-06T21:10:15.6720000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[3241]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-06T21:10:15.4360000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[3242]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-06T21:10:15.2760000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[3243]
  Log Name: System
  Source: TPM
  Date: 2024-02-06T21:10:14.7010000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[3244]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:10:08.8370000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3245]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:10:07.3220000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[3246]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-06T21:10:07.2190000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[3247]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-06T21:10:07.1930000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[3248]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.1820000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x17EC Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[3249]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.1820000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000320000001. Status 0x0. Process Id 0x17EC Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[3250]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-06T21:10:07.1300000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[3251]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3252]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3253]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3254]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3255]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3256]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3257]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3258]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3259]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3260]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3261]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3262]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3263]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3264]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3265]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3266]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3267]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T21:10:07.0810000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3268]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-06T21:10:05.8600000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[3269]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-06T21:10:05.8550000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[3270]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-06T21:10:05.8550000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[3271]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-06T21:10:05.8550000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[3272]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:10:05.8440000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3273]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:10:05.8400000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3274]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:10:05.8350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3275]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:10:05.8350000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[3276]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:10:05.8350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3277]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:10:05.8300000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3278]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:10:05.8230000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3279]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:10:05.8190000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3280]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-06T21:10:05.5050000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffffc600ac72d180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\020624-22078-01.dmp. Report Id: 66432c25-a16e-4470-a721-4f622003cce7. 

Event[3281]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-06T21:10:05.4950000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[3282]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-06T21:10:05.4950000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[3283]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-06T21:10:05.4920000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[3284]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4850000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[3285]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4850000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[3286]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4760000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[3287]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4730000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[3288]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4600000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[3289]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4580000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[3290]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4560000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[3291]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4500000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[3292]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4400000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[3293]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4360000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[3294]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T21:10:05.4260000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[3295]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-06T21:10:05.4020000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[3296]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-06T21:10:05.4020000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[3297]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-06T21:10:03.8180000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[3298]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T21:10:03.4540000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[3299]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T21:10:02.9590000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[3300]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T21:10:02.6110000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[3301]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T21:10:01.5410000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[3302]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T21:10:01.4400000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[3303]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-06T21:09:57.6100000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[3304]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-06T21:09:54.5120000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[3305]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-06T21:09:52.0750000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[3306]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T21:09:51.8860000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3307]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T21:09:51.8860000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3308]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T21:09:51.8230000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3309]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T21:09:51.8230000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3310]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T21:09:51.8070000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3311]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T21:09:51.7920000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[3312]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-06T21:09:51.7920000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[3313]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-06T21:09:51.7290000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[3314]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7350000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3315]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3316]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7330000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3317]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7320000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3318]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7260000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3319]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7250000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[3320]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[3321]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7230000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[3322]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7170000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3323]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7160000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3324]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3325]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7110000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3326]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3327]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3328]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3329]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.7020000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3330]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.6980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3331]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.6970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3332]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.6940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3333]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.6930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3334]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.6920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3335]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.6910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3336]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.6900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3337]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T21:09:51.6780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[3338]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T21:09:51.2390000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[3339]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T21:09:51.2290000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[3340]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T21:09:51.2270000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[3341]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:09:51.2000000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3342]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:09:51.1050000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3343]
  Log Name: System
  Source: volmgr
  Date: 2024-02-06T21:09:51.0710000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[3344]
  Log Name: System
  Source: volmgr
  Date: 2024-02-06T21:09:51.0710000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[3345]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T21:09:51.0370000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[3346]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:09:45.5570000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3347]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:09:45.5560000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3348]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T21:09:45.5550000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3349]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T21:10:05.9780000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 22 seconds. 

Event[3350]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T21:10:05.9780000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[3351]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T21:10:05.9780000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[3352]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T21:10:05.9780000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 20:58:22 on ?06/?02/?2024 was unexpected. 

Event[3353]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-06T21:09:44.1460000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[3354]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T21:09:44.0930000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[3355]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T21:09:44.0880000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[3356]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T21:09:44.0880000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[3357]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T21:09:44.0880000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[3358]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T21:09:44.0880000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?06T21:09:42.000000000Z. 

Event[3359]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T21:09:44.0880000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[3360]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T21:09:44.0880000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[3361]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T21:09:44.0880000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[3362]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T21:09:44.0880000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[3363]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T21:09:44.0880000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?06T21:09:43.500000000Z. 

Event[3364]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:01:03.6610000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3365]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:00:56.0720000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslc53c899f
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{651FD3F7-1AAA-4CFE-96ED-A365241BCFB4}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3366]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:00:26.1290000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3367]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:00:26.1280000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3368]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:00:24.9240000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3369]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:00:24.9240000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3370]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T21:00:24.9240000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3371]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:00:24.5720000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3372]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:00:24.5710000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3373]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T21:00:23.4810000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3374]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T21:00:18.5000000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3375]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:59:54.9570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3376]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:59:41.0850000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3377]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:59:41.0620000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3378]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6780000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 23968. 

Event[3379]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6780000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 23968. 

Event[3380]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6780000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[3381]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6780000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[3382]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6770000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[3383]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6770000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[3384]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6770000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[3385]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6770000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[3386]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[3387]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{ec8507d5-c41f-11ee-8958-6245b4eb6eb6}" 

Event[3388]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[3389]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[3390]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[3391]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[3392]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[3393]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3394]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3395]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[3396]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[3397]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[3398]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[3399]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[3400]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[3401]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[3402]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[3403]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[3404]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[3405]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[3406]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[3407]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[3408]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[3409]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:59:37.6740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[3410]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:59:36.3910000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3411]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:59:18.8970000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3412]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:59:18.8970000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3413]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:59:18.8970000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3414]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:59:18.8970000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3415]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:59:18.8820000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3416]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:59:18.8820000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3417]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:59:18.8820000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3418]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:59:18.8820000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3419]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:44.0980000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/5b4331a8-edb7-4ea1-831c-1caf6a725976/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x1548 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3420]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:44.0980000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001420000001. Status 0x0. Process Id 0x1548 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3421]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:58:43.5940000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3422]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:58:43.5920000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3423]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-06T20:58:43.3700000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[3424]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:58:32.8360000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3425]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-06T20:58:31.4650000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[3426]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-06T20:58:31.3240000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[3427]
  Log Name: System
  Source: TPM
  Date: 2024-02-06T20:58:30.6930000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[3428]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:25.2620000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3429]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:58:23.7260000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[3430]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-06T20:58:23.6060000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[3431]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.5850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x16FC Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[3432]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.5840000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000120000001. Status 0x0. Process Id 0x16FC Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[3433]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-06T20:58:23.5500000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[3434]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3435]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3436]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3437]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3438]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3439]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3440]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3441]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3442]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3443]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3444]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3445]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3446]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3447]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3448]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3449]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3450]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:58:23.4880000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3451]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-06T20:58:22.3120000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[3452]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-06T20:58:22.3050000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[3453]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-06T20:58:22.3050000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[3454]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-06T20:58:22.3050000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[3455]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:22.2720000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3456]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:22.2700000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3457]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:22.2660000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3458]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:22.2660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[3459]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:22.2660000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3460]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:22.2610000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3461]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:22.2530000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3462]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:22.2490000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3463]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-06T20:58:21.9010000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[3464]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-06T20:58:21.9010000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[3465]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-06T20:58:21.8980000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[3466]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-06T20:58:21.8970000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffffbf01dbd6c180, 0x0000000000000005). A dump was saved in: C:\WINDOWS\Minidump\020624-22468-01.dmp. Report Id: abdb1cb3-6f3b-4bb7-a617-311be0472660. 

Event[3467]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8910000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[3468]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8910000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[3469]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8810000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[3470]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8780000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[3471]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8640000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[3472]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8630000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[3473]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8610000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[3474]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8560000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[3475]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8450000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[3476]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8410000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[3477]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:58:21.8310000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[3478]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-06T20:58:21.8070000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[3479]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-06T20:58:21.8070000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[3480]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-06T20:58:20.2270000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[3481]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:58:19.8590000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[3482]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:58:19.3390000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[3483]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:58:19.0920000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[3484]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:58:18.2040000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[3485]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:58:18.0890000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[3486]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-06T20:58:10.5460000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[3487]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-06T20:58:09.8820000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[3488]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-06T20:58:08.0860000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[3489]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:58:07.8960000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3490]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:58:07.8960000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3491]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:58:07.8330000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3492]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:58:07.8330000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3493]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:58:07.8180000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3494]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:58:07.8020000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[3495]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-06T20:58:07.8020000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[3496]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-06T20:58:07.7400000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[3497]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3498]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3499]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7450000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3500]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7440000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3501]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3502]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7360000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3503]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7350000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3504]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3505]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3506]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3507]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3508]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7230000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3509]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3510]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3511]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3512]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3513]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7100000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3514]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7090000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3515]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3516]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3517]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3518]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3519]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.7020000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3520]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:58:07.6890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[3521]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T20:58:07.3600000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[3522]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T20:58:07.3490000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[3523]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T20:58:07.3470000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[3524]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:07.3200000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3525]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:07.2250000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3526]
  Log Name: System
  Source: volmgr
  Date: 2024-02-06T20:58:07.1940000Z
  Event ID: 162
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file generation succeded. 

Event[3527]
  Log Name: System
  Source: volmgr
  Date: 2024-02-06T20:58:07.1790000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[3528]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:58:07.1570000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[3529]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:01.8850000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3530]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:01.8840000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3531]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:58:01.8830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3532]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T20:58:22.3990000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 22 seconds. 

Event[3533]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T20:58:22.3990000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[3534]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T20:58:22.3990000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[3535]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T20:58:22.3980000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 20:35:27 on ?06/?02/?2024 was unexpected. 

Event[3536]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-06T20:58:00.1290000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[3537]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:58:00.0850000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[3538]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:58:00.0800000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[3539]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:58:00.0800000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[3540]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:58:00.0800000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[3541]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:58:00.0800000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?06T20:57:58.000000000Z. 

Event[3542]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:58:00.0800000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[3543]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:58:00.0800000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[3544]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:58:00.0800000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[3545]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:58:00.0800000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[3546]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:58:00.0790000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?06T20:57:59.500000000Z. 

Event[3547]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:56:28.5980000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 30 keys and creating 4 modified pages. 

Event[3548]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:38:01.5800000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslf0924176
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{651FD3F7-1AAA-4CFE-96ED-A365241BCFB4}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3549]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:37:44.0230000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NMPJ99VJBWV-Microsoft.YourPhone 

Event[3550]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:37:42.5140000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone 

Event[3551]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:37:42.3170000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  LGHUB Updater Service
Service File Name:  "C:\Program Files\LGHUB\lghub_updater.exe" --run-as-service
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[3552]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:37:42.1250000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[3553]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:37:40.3130000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[3554]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:37:30.0570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3555]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:37:30.0570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3556]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:37:30.0560000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3557]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:37:14.9150000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3558]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:36:56.2600000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3559]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:36:56.2580000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3560]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:36:54.1800000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[3561]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:36:53.4130000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3562]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:36:51.6840000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3563]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:36:50.8580000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3564]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:36:47.7520000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3565]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:36:45.9700000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\Users\felip\AppData\Local\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3566]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:36:32.2500000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3567]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:36:32.2280000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3568]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 5752. 

Event[3569]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 5752. 

Event[3570]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[3571]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[3572]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[3573]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[3574]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{ec8507d5-c41f-11ee-8958-6245b4eb6eb6}" 

Event[3575]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[3576]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[3577]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[3578]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[3579]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[3580]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3581]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3582]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[3583]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[3584]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[3585]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[3586]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[3587]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[3588]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[3589]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[3590]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[3591]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[3592]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[3593]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[3594]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[3595]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[3596]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:36:31.4170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[3597]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:36:27.4320000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3598]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:36:17.7340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3599]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:36:17.7340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3600]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:36:17.7340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3601]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:36:17.7340000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3602]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:36:17.7190000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3603]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:36:17.7190000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3604]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:36:17.7190000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3605]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:36:17.7190000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3606]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:35:38.9960000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3607]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:35.9890000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/2960da1f-6787-4065-9c50-3022a8569e42/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x1518 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3608]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:35.9890000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000520000001. Status 0x0. Process Id 0x1518 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3609]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:35:34.9090000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3610]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:35:34.9070000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3611]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-06T20:35:34.6510000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[3612]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-06T20:35:30.8350000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[3613]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-06T20:35:30.6490000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[3614]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:30.4950000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3615]
  Log Name: System
  Source: TPM
  Date: 2024-02-06T20:35:29.7270000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[3616]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:35:28.9060000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[3617]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-06T20:35:28.7850000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[3618]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-06T20:35:28.7610000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[3619]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.7490000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x1710 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[3620]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.7490000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001020000001. Status 0x0. Process Id 0x1710 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[3621]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-06T20:35:28.6950000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[3622]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3623]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3624]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3625]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3626]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3627]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3628]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3629]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3630]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3631]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3632]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3633]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3634]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3635]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3636]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3637]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3638]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:35:28.6450000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3639]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-06T20:35:27.4320000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[3640]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-06T20:35:27.4260000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[3641]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-06T20:35:27.4260000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[3642]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-06T20:35:27.4260000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[3643]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:27.3960000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3644]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:27.3920000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3645]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:27.3890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3646]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:27.3890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[3647]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:27.3890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3648]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:27.3840000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3649]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:27.3760000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3650]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:27.3720000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3651]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-06T20:35:27.0250000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffff81807bb2d180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\020624-28593-01.dmp. Report Id: 3af3f947-42d4-424d-934f-72ac20ad143b. 

Event[3652]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-06T20:35:27.0190000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[3653]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-06T20:35:27.0190000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[3654]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-06T20:35:27.0160000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[3655]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:27.0080000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[3656]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:27.0080000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[3657]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:26.9980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[3658]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:26.9950000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[3659]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:26.9810000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[3660]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:26.9790000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[3661]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:26.9770000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[3662]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:26.9720000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[3663]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:26.9610000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[3664]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:26.9570000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[3665]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-06T20:35:26.9460000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[3666]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-06T20:35:26.9220000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[3667]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-06T20:35:26.9220000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[3668]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-06T20:35:25.3440000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[3669]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:35:24.9740000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[3670]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:35:24.4730000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[3671]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:35:24.1050000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[3672]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:35:23.0590000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[3673]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:35:22.9730000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[3674]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-06T20:35:09.4400000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[3675]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-06T20:35:07.6420000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[3676]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-06T20:35:06.9230000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[3677]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:35:06.7180000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3678]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:35:06.7180000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3679]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:35:06.6700000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3680]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:35:06.6700000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3681]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:35:06.6550000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3682]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-06T20:35:06.6390000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[3683]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-06T20:35:06.6390000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[3684]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-06T20:35:06.5770000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[3685]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3686]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3687]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3688]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3689]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3690]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3691]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5720000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3692]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5710000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3693]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3694]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3695]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3696]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3697]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3698]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5550000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3699]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3700]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3701]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3702]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3703]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3704]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3705]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3706]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5400000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3707]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5390000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3708]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-06T20:35:06.5260000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[3709]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T20:35:06.1970000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[3710]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T20:35:06.1860000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[3711]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T20:35:06.1850000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[3712]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:06.1570000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3713]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:06.0530000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3714]
  Log Name: System
  Source: volmgr
  Date: 2024-02-06T20:35:06.0230000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[3715]
  Log Name: System
  Source: volmgr
  Date: 2024-02-06T20:35:06.0070000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[3716]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-06T20:35:05.9830000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[3717]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:00.6850000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3718]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:00.6840000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3719]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-06T20:35:00.6840000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3720]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T20:35:27.5270000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 29 seconds. 

Event[3721]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T20:35:27.5270000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[3722]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T20:35:27.5270000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[3723]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T20:35:27.5270000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 22:09:34 on ?05/?02/?2024 was unexpected. 

Event[3724]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-06T20:34:59.1600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[3725]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:34:59.1070000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[3726]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:34:59.1010000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[3727]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:34:59.1010000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[3728]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:34:59.1010000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[3729]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:34:59.1010000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?06T20:34:57.000000000Z. 

Event[3730]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:34:59.1010000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[3731]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:34:59.1010000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[3732]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:34:59.1010000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[3733]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:34:59.1010000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[3734]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:34:59.1010000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?06T20:34:58.500000000Z. 

Event[3735]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:28:36.3690000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl5ffc6330
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{651FD3F7-1AAA-4CFE-96ED-A365241BCFB4}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3736]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:28:36.3400000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3327.0) - Current Channel (Broad) 

Event[3737]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:28:30.8250000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3327.0) - Current Channel (Broad) 

Event[3738]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:28:16.3070000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[3739]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:20:20.5570000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000A20000003). Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3740]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:20:20.5240000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3741]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:18:16.6730000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000003). Status: 0x0. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3742]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:18:16.6670000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000003). Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3743]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:18:16.5340000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000003). Status: 0x0. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3744]
  Log Name: System
  Source: Microsoft-Windows-Bits-Client
  Date: 2024-02-06T20:18:15.4320000Z
  Event ID: 16393
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
BITS has encountered an error communicating with an Internet Gateway Device.  Please check that the device is functioning properly. BITS will not attempt to use this device until the next system reboot. Error code: 0x80070020. 

Event[3745]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:18:06.4300000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3746]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:18:06.4290000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3747]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:17:57.4170000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3748]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:17:57.4170000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3749]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:17:48.3930000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3750]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:17:48.3920000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3751]
  Log Name: System
  Source: Microsoft-Windows-Bits-Client
  Date: 2024-02-06T20:17:11.1340000Z
  Event ID: 16393
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
BITS has encountered an error communicating with an Internet Gateway Device.  Please check that the device is functioning properly. BITS will not attempt to use this device until the next system reboot. Error code: 0x80070020. 

Event[3752]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:17:02.1310000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3753]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:17:02.1300000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3754]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:16:53.1150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000002). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3755]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:16:53.1140000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3756]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:16:44.0970000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3757]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:16:44.0970000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3758]
  Log Name: System
  Source: Microsoft-Windows-Bits-Client
  Date: 2024-02-06T20:16:43.0710000Z
  Event ID: 16393
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
BITS has encountered an error communicating with an Internet Gateway Device.  Please check that the device is functioning properly. BITS will not attempt to use this device until the next system reboot. Error code: 0x80070020. 

Event[3759]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:16:34.0610000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000002). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3760]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:16:34.0610000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3761]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:16:25.0090000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3762]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:16:25.0090000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3763]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:16:15.9850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3764]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:16:15.9850000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3765]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:16:03.6020000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3766]
  Log Name: System
  Source: Microsoft-Windows-Bits-Client
  Date: 2024-02-06T20:15:58.1260000Z
  Event ID: 16393
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
BITS has encountered an error communicating with an Internet Gateway Device.  Please check that the device is functioning properly. BITS will not attempt to use this device until the next system reboot. Error code: 0x80070020. 

Event[3767]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:15:54.2060000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3768]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:15:54.2010000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3769]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:15:54.2010000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3770]
  Log Name: System
  Source: ACPI
  Date: 2024-02-06T20:15:53.1580000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
: The embedded controller (EC) returned data when none was requested. The BIOS might be trying to access the EC without synchronizing with the operating system. This data will be ignored. No further action is necessary; however, you should check with your computer manufacturer for an upgraded BIOS. 

Event[3771]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:15:49.1230000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3772]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:15:49.1230000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3773]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:15:48.3450000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HWiNFO Kernel Driver (v190)
Service File Name:  C:\WINDOWS\Temp\HWiNFO64A_190.SYS
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3774]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:15:40.1100000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3775]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:15:40.1100000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3776]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:15:31.0740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3777]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:15:31.0730000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3778]
  Log Name: System
  Source: Microsoft-Windows-Bits-Client
  Date: 2024-02-06T20:15:31.0150000Z
  Event ID: 16393
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
BITS has encountered an error communicating with an Internet Gateway Device.  Please check that the device is functioning properly. BITS will not attempt to use this device until the next system reboot. Error code: 0x80070020. 

Event[3779]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:15:22.0060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3780]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:15:22.0050000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3781]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:15:12.9490000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3782]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:15:12.9490000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3783]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-06T20:15:03.9310000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0xC0000043. Process Id 0x54BC Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[3784]
  Log Name: System
  Source: Microsoft-Windows-HttpEvent
  Date: 2024-02-06T20:15:03.9300000Z
  Event ID: 15005
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unable to bind to the underlying transport for [::]:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine.  The data field contains the error number. 

Event[3785]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:14:59.7210000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3786]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:14:08.5510000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3787]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:12:12.1960000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[3788]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:11:38.1250000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[3789]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:11:35.6820000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1025 keys and creating 61 modified pages. 

Event[3790]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:11:24.9180000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.23122.73.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[3791]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-06T20:10:40.5990000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[3792]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:10:33.5280000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\24716aef7915c612_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[3793]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:10:31.2870000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftTeams_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[3794]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:10:31.0350000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftTeams_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 35 keys and creating 3 modified pages. 

Event[3795]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:10:26.7690000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3796]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:10:25.2350000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logi Options+
Service File Name:  "C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe" --run-as-service
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[3797]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:17.8320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[3798]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 15632. 

Event[3799]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 15632. 

Event[3800]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[3801]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[3802]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[3803]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[3804]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[3805]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[3806]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[3807]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{ec8507d5-c41f-11ee-8958-6245b4eb6eb6}" 

Event[3808]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[3809]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[3810]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[3811]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[3812]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[3813]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3814]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[3815]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[3816]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[3817]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[3818]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[3819]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[3820]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[3821]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[3822]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[3823]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[3824]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[3825]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[3826]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[3827]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[3828]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[3829]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-06T20:10:14.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[3830]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:10:12.4490000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3831]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:10:12.4490000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3832]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:10:12.4480000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3833]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:10:10.4410000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3834]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:10:10.4160000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3835]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:10:04.4560000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3836]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:09:37.3650000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[3837]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:09:32.6180000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 25 keys and creating 4 modified pages. 

Event[3838]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:09:32.6150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 28 keys and creating 4 modified pages. 

Event[3839]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:09:31.2880000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3840]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-06T20:09:31.2860000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3841]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:09:31.0200000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\Users\felip\AppData\Local\Microsoft\Windows\UsrClass.dat was reorganized with a starting size of 9924608 bytes and an ending size of 9924608 bytes. 

Event[3842]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:09:30.9290000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\Users\felip\ntuser.dat was reorganized with a starting size of 14360576 bytes and an ending size of 13639680 bytes. 

Event[3843]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-06T20:09:30.8400000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[3844]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-06T20:09:30.5760000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[3845]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-06T20:09:30.5240000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl24aa38d1
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{38F751EA-F13C-4851-ACF4-5CCA693E84AD}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3846]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-02-06T20:09:29.8490000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?02?-?05T22:10:52.092731000Z
Wake Time: ?2024?-?02?-?06T20:09:28.811116900Z

Wake Source: Unknown 

Event[3847]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T20:09:29.6250000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 2 to 4.

Reason Unknown 

BootId: 24 

Event[3848]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-06T20:09:28.8790000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[3849]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-06T20:09:28.7550000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 2.

Reason SxTransition 

BootId: 24 

Event[3850]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:09:28.7550000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[3851]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:09:28.7550000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[3852]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-06T20:09:28.7540000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[3853]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-06T20:09:28.0790000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[3854]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-06T20:09:27.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?06T20:09:27.500000000Z from ?2024?-?02?-?05T22:10:56.524680800Z.
Time Delta: 79110975 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?06T20:09:27.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[3855]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T22:10:56.5240000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[3856]
  Log Name: System
  Source: EventLog
  Date: 2024-02-06T20:09:28.0380000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 79212 seconds. 

Event[3857]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T22:10:52.3690000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[3858]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T22:10:52.0950000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason ScreenOffGracePeriod 

BootId: 24 

Event[3859]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T22:10:52.0920000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[3860]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-05T22:10:51.7180000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[3861]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:10:50.4690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server microsoft.windowscommunicationsapps_16005.14326.21798.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout. 

Event[3862]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:10:48.9590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server 5319275A.WhatsAppDesktop_2.2401.5.0_x64__cv1g1gvanyjgm!App.AppXv31c1zt1bt5n0dgykbrk4qd21ca1ea87.mca did not register with DCOM within the required timeout. 

Event[3863]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:10:48.9060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {B9B05098-3E30-483F-87F7-027CA78DA287} did not register with DCOM within the required timeout. 

Event[3864]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:10:47.4700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. 

Event[3865]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:10:47.1540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. 

Event[3866]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:10:46.3340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. 

Event[3867]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:10:45.0080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. 

Event[3868]
  Log Name: System
  Source: User32
  Date: 2024-02-05T22:10:38.9460000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: power off
 Comment:  

Event[3869]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:10:37.8620000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3870]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:10:34.1610000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3871]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:10:34.1610000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3872]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:10:34.1600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3873]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:10:34.1600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3874]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:10:34.1450000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3875]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:10:34.1450000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3876]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:10:34.1450000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3877]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:10:34.1450000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[3878]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T22:09:45.9700000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[3879]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:45.7090000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/bf8394a6-5745-460d-8350-f9c953001932/) to URL group (0xFE00000F20000001). Status: 0x0. Process Id 0x1724 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3880]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:45.7090000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000F20000001. Status 0x0. Process Id 0x1724 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[3881]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:09:44.7420000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3882]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T22:09:44.7400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[3883]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-05T22:09:44.5120000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[3884]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-05T22:09:39.6270000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[3885]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-05T22:09:39.4820000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[3886]
  Log Name: System
  Source: TPM
  Date: 2024-02-05T22:09:38.6720000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[3887]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T22:09:38.6710000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[3888]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:36.7370000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3889]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-05T22:09:35.9680000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[3890]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-05T22:09:35.9490000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[3891]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.9050000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x14C4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[3892]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.9050000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000A20000001. Status 0x0. Process Id 0x14C4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[3893]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-05T22:09:35.8960000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[3894]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3895]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3896]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3897]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3898]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3899]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3900]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3901]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3902]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3903]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3904]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3905]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3906]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3907]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3908]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3909]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3910]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T22:09:35.8190000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[3911]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-05T22:09:34.6130000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[3912]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-05T22:09:34.6070000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[3913]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-05T22:09:34.6070000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[3914]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-05T22:09:34.6070000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[3915]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:34.5950000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3916]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:34.5920000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3917]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:34.5880000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3918]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:34.5870000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[3919]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:34.5870000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3920]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:34.5830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3921]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:34.5760000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3922]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:34.5710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3923]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-05T22:09:34.2910000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffffe000aa72d180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\020524-18906-01.dmp. Report Id: f6f2eb9e-24dc-457e-82dc-43f68b87517e. 

Event[3924]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-05T22:09:34.2360000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[3925]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-05T22:09:34.2360000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[3926]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-05T22:09:34.2330000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[3927]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.2260000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[3928]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.2250000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[3929]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.2160000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[3930]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.2130000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[3931]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.1990000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[3932]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.1980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[3933]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.1960000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[3934]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.1900000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[3935]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.1800000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[3936]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.1760000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[3937]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T22:09:34.1650000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[3938]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-05T22:09:34.1410000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[3939]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-05T22:09:34.1410000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[3940]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-05T22:09:32.5720000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[3941]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T22:09:32.2100000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[3942]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T22:09:31.7320000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[3943]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T22:09:31.3630000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[3944]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T22:09:30.3340000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[3945]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-05T22:09:25.7550000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[3946]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T22:09:25.3940000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[3947]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-05T22:09:24.8660000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[3948]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-05T22:09:23.3170000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[3949]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T22:09:23.1440000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3950]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T22:09:23.1440000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3951]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T22:09:23.0810000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3952]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T22:09:23.0810000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3953]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T22:09:23.0650000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[3954]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T22:09:23.0500000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[3955]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-05T22:09:23.0500000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[3956]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-05T22:09:23.0030000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[3957]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:23.0080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3958]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:23.0060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3959]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:23.0050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3960]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:23.0040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3961]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3962]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3963]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9960000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3964]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[3965]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3966]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3967]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3968]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3969]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3970]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3971]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3972]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3973]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3974]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3975]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3976]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3977]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9640000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3978]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9630000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[3979]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9620000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3980]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T22:09:22.9490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[3981]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T22:09:22.6380000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[3982]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T22:09:22.6270000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[3983]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T22:09:22.6260000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[3984]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:22.5990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3985]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:22.4990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3986]
  Log Name: System
  Source: volmgr
  Date: 2024-02-05T22:09:22.4610000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[3987]
  Log Name: System
  Source: volmgr
  Date: 2024-02-05T22:09:22.4610000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[3988]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T22:09:22.4320000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[3989]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:17.5670000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3990]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:17.5660000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3991]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T22:09:17.5650000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[3992]
  Log Name: System
  Source: EventLog
  Date: 2024-02-05T22:09:34.7290000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 19 seconds. 

Event[3993]
  Log Name: System
  Source: EventLog
  Date: 2024-02-05T22:09:34.7290000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[3994]
  Log Name: System
  Source: EventLog
  Date: 2024-02-05T22:09:34.7290000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[3995]
  Log Name: System
  Source: EventLog
  Date: 2024-02-05T22:09:34.7290000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 21:33:36 on ?05/?02/?2024 was unexpected. 

Event[3996]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-05T22:09:16.1470000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[3997]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T22:09:16.0950000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[3998]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T22:09:16.0900000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[3999]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T22:09:16.0900000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[4000]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T22:09:16.0900000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[4001]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T22:09:16.0900000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?05T22:09:15.000000000Z. 

Event[4002]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T22:09:16.0900000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[4003]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T22:09:16.0890000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[4004]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T22:09:16.0890000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[4005]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T22:09:16.0890000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[4006]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T22:09:16.0890000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?05T22:09:15.500000000Z. 

Event[4007]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T22:05:33.2380000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\bfc27b3bb6d0d16c_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4008]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T22:05:33.2370000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4009]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T22:05:33.2360000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4010]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:57:16.0500000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4011]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T21:57:16.0340000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4012]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:55:12.1610000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4013]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:55:12.1560000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000002). Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4014]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:55:12.0610000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0x0. Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4015]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:55:12.0540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000001). Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4016]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:55:08.0920000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000001). Status: 0x0. Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4017]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:55:08.0820000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4018]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:55:07.9850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4019]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:55:07.9790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4020]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:54:28.5610000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4021]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:54:28.5490000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001320000001). Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4022]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T21:54:23.6730000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001320000001). Status: 0x0. Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4023]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T21:54:19.5450000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4024]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T21:53:25.6380000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\WinRAR.ShellExtension_s4jet1zx4n14a\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\404089864fa344cb_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4025]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T21:44:36.2150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[4026]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T21:42:42.9820000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 3.

Reason InputAccelerometer 

BootId: 23 

Event[4027]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T21:26:50.7580000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason SessionUnlock 

BootId: 23 

Event[4028]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T21:14:46.4520000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4029]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T21:12:42.2750000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4030]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T18:07:32.0960000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ALSysIO
Service File Name:  C:\Users\felip\AppData\Local\Temp\ALSysIO64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[4031]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T17:58:28.4900000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume16) is healthy.  No action is needed. 

Event[4032]
  Log Name: System
  Source: disk
  Date: 2024-02-05T17:58:20.4530000Z
  Event ID: 153
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The IO operation at logical block address 0x0 for Disk 4 (PDO name: \Device\0000014e) was retried. 

Event[4033]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T17:45:33.1040000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4034]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T17:45:33.1030000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 6 keys and creating 1 modified pages. 

Event[4035]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T17:19:27.1360000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4036]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T17:19:27.1250000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4037]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T17:17:20.0410000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4038]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T17:17:20.0360000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000001). Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4039]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T17:17:15.1500000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x6588 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4040]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T17:17:11.0290000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4041]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T17:07:54.6470000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume14) is healthy.  No action is needed. 

Event[4042]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T15:35:29.8230000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\WINDOWS\System32\config\COMPONENTS was reorganized with a starting size of 41172992 bytes and an ending size of 41172992 bytes. 

Event[4043]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-05T15:27:59.7830000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4044]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-05T15:10:55.7820000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4045]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-05T14:53:51.7810000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4046]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T14:49:17.6030000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4047]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T14:47:13.5240000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4048]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-05T14:36:47.7790000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4049]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-05T14:19:27.7870000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[4050]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-05T14:19:27.7750000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4051]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T14:11:52.4840000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ALSysIO
Service File Name:  C:\Users\felip\AppData\Local\Temp\ALSysIO64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[4052]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T13:06:31.2480000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4053]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T13:06:28.1000000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4054]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T13:06:14.9180000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4055]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T13:06:14.9180000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4056]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T13:06:06.4950000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4057]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T13:06:01.4980000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4058]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T13:06:01.4980000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4059]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T13:06:00.8640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[4060]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T12:44:06.1150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[4061]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T12:24:59.1410000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4062]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T12:24:23.3840000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl122e5eba
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{38F751EA-F13C-4851-ACF4-5CCA693E84AD}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[4063]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T12:24:23.3410000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3251.0) - Current Channel (Broad) 

Event[4064]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T12:24:18.0910000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3251.0) - Current Channel (Broad) 

Event[4065]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T12:24:06.8880000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4066]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T12:22:48.3840000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4067]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T12:16:24.5230000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4068]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T12:16:16.0740000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4069]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 26248. 

Event[4070]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 26248. 

Event[4071]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[4072]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[4073]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4074]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4075]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[4076]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[4077]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[4078]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[4079]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[4080]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{ec8507d5-c41f-11ee-8958-6245b4eb6eb6}" 

Event[4081]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[4082]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[4083]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[4084]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[4085]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[4086]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[4087]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[4088]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[4089]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[4090]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[4091]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[4092]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[4093]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[4094]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[4095]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[4096]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[4097]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[4098]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[4099]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[4100]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T12:16:11.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[4101]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T12:16:10.1530000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslf7011572
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5CCF7ECA-DAB1-409B-A87D-EFCF1C008F5C}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[4102]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T12:16:08.3810000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4103]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T12:15:39.7980000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4104]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:15:13.2620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/f8d20a7a-300e-46df-83a5-435a6a0424a4/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x168C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[4105]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:15:13.2610000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001520000001. Status 0x0. Process Id 0x168C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[4106]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T12:15:12.9860000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4107]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T12:15:12.9840000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4108]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-05T12:15:12.7660000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[4109]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:14:28.2130000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[4110]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:14:28.2130000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[4111]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:14:28.2130000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[4112]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:14:28.2130000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[4113]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:14:28.1980000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[4114]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:14:28.1980000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[4115]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:14:28.1980000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[4116]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:14:28.1980000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[4117]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T12:13:46.5090000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[4118]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-05T12:13:41.0260000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[4119]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-02-05T12:13:40.7630000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[4120]
  Log Name: System
  Source: TPM
  Date: 2024-02-05T12:13:39.7130000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[4121]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:39.2220000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4122]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-02-05T12:13:37.7420000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[4123]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T12:13:37.6390000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[4124]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-05T12:13:37.4750000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[4125]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.4600000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x1470 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[4126]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.4590000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001320000001. Status 0x0. Process Id 0x1470 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[4127]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-02-05T12:13:37.4180000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[4128]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4129]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4130]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4131]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4132]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4133]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4134]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4135]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4136]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4137]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4138]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4139]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4140]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4141]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4142]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4143]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4144]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T12:13:37.3640000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[4145]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-02-05T12:13:36.1610000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[4146]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-05T12:13:36.1550000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[4147]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-05T12:13:36.1550000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[4148]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-02-05T12:13:36.1550000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[4149]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:36.1380000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4150]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:36.1350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4151]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:36.1320000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4152]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:36.1310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[4153]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:36.1310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4154]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:36.1260000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4155]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:36.1190000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4156]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:36.1140000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4157]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-05T12:13:35.7680000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[4158]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-05T12:13:35.7680000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[4159]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-02-05T12:13:35.7650000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[4160]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7580000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[4161]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7570000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[4162]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7470000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[4163]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7440000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[4164]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7320000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[4165]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7300000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[4166]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7290000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[4167]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7230000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[4168]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-02-05T12:13:35.7140000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffff8000dc32d180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\020524-27312-01.dmp. Report Id: 50bc8cbd-f43c-4ff9-93f8-f4c34b701421. 

Event[4169]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7110000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[4170]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.7070000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[4171]
  Log Name: System
  Source: LsaSrv
  Date: 2024-02-05T12:13:35.6960000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[4172]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-05T12:13:35.6720000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[4173]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-02-05T12:13:35.6720000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[4174]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-02-05T12:13:34.1030000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[4175]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T12:13:33.7170000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[4176]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T12:13:33.2290000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[4177]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T12:13:32.8820000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[4178]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T12:13:31.8670000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[4179]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T12:13:31.7800000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[4180]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T12:13:30.5940000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[4181]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-05T12:13:20.8820000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[4182]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-05T12:13:19.8480000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[4183]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-05T12:13:17.3790000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[4184]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T12:13:17.2020000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[4185]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T12:13:17.2020000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[4186]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T12:13:17.1390000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[4187]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T12:13:17.1390000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[4188]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T12:13:17.1230000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[4189]
  Log Name: System
  Source: Netwtw12
  Date: 2024-02-05T12:13:17.1080000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[4190]
  Log Name: System
  Source: MEIx64
  Date: 2024-02-05T12:13:17.1080000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[4191]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-02-05T12:13:17.0450000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[4192]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[4193]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[4194]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[4195]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[4196]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[4197]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[4198]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[4199]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0400000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[4200]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4201]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0330000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4202]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0290000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4203]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4204]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4205]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0230000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4206]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0200000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4207]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4208]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4209]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4210]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0100000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4211]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0100000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4212]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4213]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4214]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:17.0070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[4215]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-05T12:13:16.9940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[4216]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T12:13:16.4110000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[4217]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T12:13:16.3990000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[4218]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T12:13:16.3930000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[4219]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:16.3150000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4220]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:16.1160000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4221]
  Log Name: System
  Source: volmgr
  Date: 2024-02-05T12:13:16.0410000Z
  Event ID: 162
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file generation succeded. 

Event[4222]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-05T12:13:15.9550000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[4223]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:10.9230000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4224]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:10.9220000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4225]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-05T12:13:10.9220000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4226]
  Log Name: System
  Source: EventLog
  Date: 2024-02-05T12:13:36.2710000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 27 seconds. 

Event[4227]
  Log Name: System
  Source: EventLog
  Date: 2024-02-05T12:13:36.2710000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[4228]
  Log Name: System
  Source: EventLog
  Date: 2024-02-05T12:13:36.2710000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[4229]
  Log Name: System
  Source: EventLog
  Date: 2024-02-05T12:13:36.2710000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 11:42:13 on ?05/?02/?2024 was unexpected. 

Event[4230]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-02-05T12:13:09.1360000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[4231]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T12:13:09.0860000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[4232]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T12:13:09.0810000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[4233]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T12:13:09.0810000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[4234]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T12:13:09.0810000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[4235]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T12:13:09.0810000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?02?-?05T12:13:07.000000000Z. 

Event[4236]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T12:13:09.0810000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[4237]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T12:13:09.0810000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[4238]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T12:13:09.0810000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[4239]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T12:13:09.0810000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[4240]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T12:13:09.0810000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?02?-?05T12:13:08.500000000Z. 

Event[4241]
  Log Name: System
  Source: EventLog
  Date: 2024-02-05T12:00:00.5200000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 411354 seconds. 

Event[4242]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T11:29:44.3290000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\5e9f1c98229b2980_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4243]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T11:27:09.2010000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000B20000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4244]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T11:27:09.1580000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4245]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T11:25:02.0660000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000B20000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4246]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T11:25:02.0400000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000004). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4247]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-05T11:24:57.1970000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000004). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4248]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T11:24:53.0260000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4249]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T11:23:58.7080000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4250]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T11:23:43.5290000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[4251]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T11:23:26.6330000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 33 to 35.

Reason InputHid 

BootId: 22 

Event[4252]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-05T11:03:09.1850000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslfb8758d8
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5CCF7ECA-DAB1-409B-A87D-EFCF1C008F5C}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[4253]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T11:03:09.1660000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3248.0) - Current Channel (Broad) 

Event[4254]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T11:03:04.9930000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3248.0) - Current Channel (Broad) 

Event[4255]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-05T11:02:59.4490000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4256]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-02-05T10:53:44.0040000Z
  Event ID: 4
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service stopped. 

Event[4257]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T10:50:47.2360000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 32 to 33.

Reason SessionUnlock 

BootId: 22 

Event[4258]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T10:48:34.5180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?05T10:48:34.435444900Z from ?2024?-?02?-?05T10:48:34.435108300Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 4268).

RTC time: ?2024?-?02?-?05T10:48:34.435444900Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4259]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T10:48:34.4350000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[4260]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T10:48:34.4350000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?05T10:48:34.352198100Z from ?2024?-?02?-?05T10:48:34.352157300Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 4268).

RTC time: ?2024?-?02?-?05T10:48:34.352198100Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4261]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T10:48:34.3520000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[4262]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-05T10:48:34.3520000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[4263]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T10:48:34.3520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?05T10:48:34.268644500Z from ?2024?-?02?-?05T10:48:36.831252300Z.
Time Delta: -2562 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 4268).

RTC time: ?2024?-?02?-?05T10:48:34.268644500Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4264]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T10:48:34.2680000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[4265]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T10:48:28.6690000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4266]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-05T10:48:20.8400000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[4267]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 19080. 

Event[4268]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 19080. 

Event[4269]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[4270]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[4271]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4272]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4273]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[4274]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[4275]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[4276]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[4277]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[4278]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{3f357e04-c395-11ee-8957-6245b4eb6eb6}" 

Event[4279]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[4280]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[4281]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[4282]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca7-31dd-9bac-204183070f1e} 

Event[4283]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca7-31dd-9bac-204183070f1e} 

Event[4284]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[4285]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[4286]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca7-31dd-9ba 

Event[4287]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 6; device name: \Volume{234e3a45-fca7-31dd-9bac-204183070f1e}. 

Event[4288]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[4289]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca7-31dd-9bac-204183070f1e}" created 

Event[4290]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca7-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[4291]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[4292]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca7-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[4293]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca7-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[4294]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[4295]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 6l 

Event[4296]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[4297]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[4298]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-05T10:48:18.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[4299]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T10:48:17.2470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4300]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-05T10:47:41.5820000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[4301]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T10:47:41.1310000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4302]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-05T10:47:41.1240000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4303]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-02-05T10:47:40.9540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?02?-?04T23:33:43.590920500Z
Wake Time: ?2024?-?02?-?05T10:47:39.901580400Z

Wake Source: Unknown 

Event[4304]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-05T10:47:40.5190000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[4305]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T10:47:40.0580000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 30 to 32.

Reason Unknown 

BootId: 22 

Event[4306]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-05T10:47:39.8550000Z
  Event ID: 134
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) 

Event[4307]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-05T10:47:39.8450000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 29 to 30.

Reason SxTransition 

BootId: 22 

Event[4308]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T10:47:39.8440000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[4309]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T10:47:39.8440000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[4310]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-05T10:47:39.8440000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[4311]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-05T10:47:39.5810000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[4312]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-05T10:47:39.1470000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[4313]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-05T10:47:38.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?05T10:47:38.500000000Z from ?2024?-?02?-?04T23:33:50.916690000Z.
Time Delta: 40427583 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?05T10:47:38.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4314]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T23:33:50.9160000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[4315]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T23:33:45.3540000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[4316]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T23:33:43.5970000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 28 to 29.

Reason InputAccelerometer 

BootId: 22 

Event[4317]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T23:33:43.5910000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[4318]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-04T23:33:43.0720000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[4319]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.1690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4320]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.1600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4321]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.1490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4322]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.1390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4323]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.1290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4324]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.1200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4325]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.1110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4326]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.1000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4327]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4328]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4329]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4330]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4331]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4332]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4333]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4334]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4335]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4336]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4337]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:40.0070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4338]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4339]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4340]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4341]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4342]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4343]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4344]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4345]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4346]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4347]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4348]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4349]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.9060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4350]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4351]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4352]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4353]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4354]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4355]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4356]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4357]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {2DE3095A-B49E-418F-B5C1-69D2CCF62A8F} did not register with DCOM within the required timeout. 

Event[4358]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4359]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4360]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4361]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.8080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4362]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4363]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4364]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4365]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4366]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4367]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4368]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4369]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4370]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4371]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4372]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4373]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.7040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4374]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4375]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4376]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4377]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4378]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4379]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4380]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4381]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4382]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4383]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4384]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4385]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.6020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4386]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4387]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4388]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4389]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4390]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4391]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4392]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4393]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4394]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4395]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4396]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4397]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.5020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4398]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4399]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4400]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4401]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4402]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4403]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4404]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4405]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4406]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4407]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4408]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4409]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.4040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4410]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4411]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4412]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4413]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4414]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4415]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4416]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4417]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4418]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4419]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4420]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4421]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.3030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4422]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4423]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4424]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4425]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4426]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4427]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4428]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4429]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4430]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4431]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4432]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:39.2050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4433]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[4434]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[4435]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[4436]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[4437]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[4438]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[4439]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[4440]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[4441]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[4442]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[4443]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}" 

Event[4444]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[4445]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[4446]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[4447]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{17fc260a-c2b9-11ee-8957-6245b4eb6eb6}" 

Event[4448]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[4449]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca6-31dd-9bac-2041830 

Event[4450]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[4451]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T23:33:36.4040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[4452]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T23:33:34.8060000Z
  Event ID: 10005
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
DCOM got error "1053" attempting to start the service BcastDVRUserService_18faa822 with arguments "Unavailable" in order to run the server:
Windows.Media.Capture.Internal.AppCaptureShell 

Event[4453]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T23:33:34.8060000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The GameDVR and Broadcast User Service_18faa822 service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion. 

Event[4454]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T23:33:34.8060000Z
  Event ID: 7009
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
A timeout was reached (30000 milliseconds) while waiting for the GameDVR and Broadcast User Service_18faa822 service to connect. 

Event[4455]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-02-04T22:45:38.4540000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FsDepends' (10.0, ?2056?-?03?-?07T17:54:55.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[4456]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T22:45:33.3550000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy5\WINDOWS\System32\config\DRIVERS (TM: {3f357a83-c395-11ee-8957-6245b4eb6eb6}, RM: {3f357a82-c395-11ee-8957-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[4457]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T22:45:33.3300000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy5\WINDOWS\System32\config\SYSTEM (TM: {3f357a80-c395-11ee-8957-6245b4eb6eb6}, RM: {3f357a7f-c395-11ee-8957-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[4458]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-02-04T22:44:58.9890000Z
  Event ID: 3
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service started. 

Event[4459]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-04T21:27:03.4630000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4460]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-04T21:09:59.4630000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4461]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-04T20:52:55.4630000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4462]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T20:46:57.8100000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 11 keys and creating 1 modified pages. 

Event[4463]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-04T20:35:51.4640000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4464]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T20:19:21.0530000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4465]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T20:18:47.2440000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4466]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-04T20:18:31.4680000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[4467]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-04T20:18:31.4540000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4468]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T19:27:51.6440000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 7 keys and creating 2 modified pages. 

Event[4469]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T19:26:21.4360000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[4470]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T19:26:19.2410000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.GamingServices_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4471]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T19:26:19.2400000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.GamingServices_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 16 keys and creating 1 modified pages. 

Event[4472]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-04T19:00:16.7160000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy5) is healthy.  No action is needed. 

Event[4473]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-02-04T19:00:16.5250000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy4) is healthy.  No action is needed. 

Event[4474]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T18:56:15.8150000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001720000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4475]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T18:56:15.7180000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4476]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T18:53:36.6440000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001720000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4477]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T18:53:36.6250000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4478]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T18:53:31.7430000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4479]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T18:53:30.1570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4480]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T18:53:27.6120000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4481]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:52:32.4460000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 5279744 bytes and an ending size of 5255168 bytes. 

Event[4482]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T18:52:21.8420000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 26 to 28.

Reason InputAccelerometer 

BootId: 22 

Event[4483]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T18:48:34.6610000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 25 to 26.

Reason SessionUnlock 

BootId: 22 

Event[4484]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:48:08.6840000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 12 keys and creating 2 modified pages. 

Event[4485]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T18:47:52.2250000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4486]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T18:46:47.9720000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4487]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:40.8590000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[4488]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 20752. 

Event[4489]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 20752. 

Event[4490]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[4491]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[4492]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4493]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4494]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[4495]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[4496]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[4497]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[4498]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[4499]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{17fc260a-c2b9-11ee-8957-6245b4eb6eb6}" 

Event[4500]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[4501]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[4502]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[4503]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[4504]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[4505]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[4506]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[4507]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca6-31dd-9ba 

Event[4508]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 5; device name: \Volume{234e3a45-fca6-31dd-9bac-204183070f1e}. 

Event[4509]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[4510]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca6-31dd-9bac-204183070f1e}" created 

Event[4511]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[4512]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[4513]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[4514]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[4515]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[4516]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 5l 

Event[4517]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[4518]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[4519]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T18:46:38.5090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[4520]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T18:46:36.7550000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4521]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:46:28.3640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 9 keys and creating 1 modified pages. 

Event[4522]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:46:28.3630000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 17 keys and creating 2 modified pages. 

Event[4523]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:46:28.2780000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[4524]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:46:28.2630000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 71 keys and creating 10 modified pages. 

Event[4525]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:45:44.9750000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \Device\HarddiskVolume7\EFI\Microsoft\Boot\BCD was cleared updating 87 keys and creating 11 modified pages. 

Event[4526]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:45:42.4030000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 10 keys and creating 1 modified pages. 

Event[4527]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:45:42.1600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 37 keys and creating 7 modified pages. 

Event[4528]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-04T18:45:41.5410000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[4529]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T18:45:40.9780000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4530]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T18:45:40.7790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4531]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T18:45:40.7760000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4532]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-04T18:45:40.2640000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[4533]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T18:45:40.0520000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 23 to 25.

Reason Unknown 

BootId: 22 

Event[4534]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-04T18:45:39.9530000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[4535]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T18:45:39.7740000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 22 to 23.

Reason SxTransition 

BootId: 22 

Event[4536]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-04T18:45:39.7730000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[4537]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-04T18:45:39.7730000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[4538]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-04T18:45:39.7730000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[4539]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-04T18:45:39.0700000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[4540]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T18:45:38.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?04T18:45:38.500000000Z from ?2024?-?02?-?04T14:12:43.441843900Z.
Time Delta: 16375058 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?04T18:45:38.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4541]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T14:12:43.4410000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[4542]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T14:12:38.2070000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[4543]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T14:12:37.9640000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 21 to 22.

Reason Unknown 

BootId: 22 

Event[4544]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T14:12:37.9610000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[4545]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-04T14:12:37.4690000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[4546]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[4547]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[4548]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[4549]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[4550]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[4551]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[4552]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[4553]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[4554]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[4555]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[4556]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}" 

Event[4557]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[4558]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[4559]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8460000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[4560]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8460000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{17fc2132-c2b9-11ee-8957-6245b4eb6eb6}" 

Event[4561]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8460000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[4562]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8460000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca1-31dd-9bac-2041830 

Event[4563]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8460000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[4564]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T14:12:30.8460000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[4565]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T12:56:17.2140000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4566]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T12:55:37.1380000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4567]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T12:55:29.4460000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4568]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T12:55:24.4480000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4569]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T12:55:24.4480000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4570]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T12:29:15.5530000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslc517be57
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E1F193A7-2BA3-4C61-AC20-EF1AC232B65C}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[4571]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T12:29:15.5240000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3199.0) - Current Channel (Broad) 

Event[4572]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T12:29:10.4120000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3199.0) - Current Channel (Broad) 

Event[4573]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-04T12:29:10.4120000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4574]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T12:28:37.6460000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4575]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T12:28:37.6440000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4576]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T12:28:37.5410000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 19 keys and creating 8 modified pages. 

Event[4577]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T12:15:36.4720000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4578]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T12:13:24.7720000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4579]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T12:11:56.5920000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000008). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4580]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T12:11:56.5310000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4581]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T12:09:48.6540000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000008). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4582]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T12:09:48.6480000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000003). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4583]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T12:09:48.5530000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000003). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4584]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T12:09:48.5420000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4585]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T12:09:33.2620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4586]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T12:09:33.2560000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001320000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4587]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-04T12:09:28.4470000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001320000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4588]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-04T12:09:24.2480000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4589]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T12:09:08.1840000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4590]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T12:08:32.0890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4591]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 15396. 

Event[4592]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 15396. 

Event[4593]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[4594]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[4595]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4596]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4597]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[4598]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[4599]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[4600]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[4601]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[4602]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{17fc2132-c2b9-11ee-8957-6245b4eb6eb6}" 

Event[4603]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[4604]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[4605]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[4606]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[4607]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[4608]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[4609]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[4610]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca1-31dd-9ba 

Event[4611]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 4; device name: \Volume{234e3a45-fca1-31dd-9bac-204183070f1e}. 

Event[4612]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[4613]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca1-31dd-9bac-204183070f1e}" created 

Event[4614]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[4615]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[4616]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[4617]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[4618]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[4619]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 4l 

Event[4620]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[4621]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[4622]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-04T12:08:06.5680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[4623]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T12:08:04.8380000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4624]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-04T12:07:27.9650000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[4625]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-02-04T12:07:27.3350000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?02?-?03T23:26:59.919722500Z
Wake Time: ?2024?-?02?-?04T12:07:26.296733500Z

Wake Source: Unknown 

Event[4626]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T12:07:27.0210000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4627]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-04T12:07:27.0190000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4628]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-04T12:07:26.7100000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[4629]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T12:07:26.5120000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 19 to 21.

Reason Unknown 

BootId: 22 

Event[4630]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-04T12:07:26.2120000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 18 to 19.

Reason SxTransition 

BootId: 22 

Event[4631]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-04T12:07:26.2110000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[4632]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-04T12:07:26.2110000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[4633]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-04T12:07:26.2110000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[4634]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-04T12:07:26.1730000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[4635]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-04T12:07:25.5300000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[4636]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-04T12:07:24.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?04T12:07:24.500000000Z from ?2024?-?02?-?03T23:27:05.336713700Z.
Time Delta: 45619163 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?04T12:07:24.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4637]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T23:27:05.3360000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[4638]
  Log Name: System
  Source: EventLog
  Date: 2024-02-04T12:07:25.2890000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 325395 seconds. 

Event[4639]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T23:27:00.2160000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[4640]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T23:26:59.9320000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 17 to 18.

Reason InputAccelerometer 

BootId: 22 

Event[4641]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T23:26:59.9190000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[4642]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-03T23:26:59.5250000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[4643]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4644]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4645]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4646]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4647]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4648]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4649]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4650]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4651]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4652]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.6030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4653]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4654]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4655]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4656]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4657]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4658]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4659]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4660]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4661]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4662]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4663]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4664]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4665]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.5030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4666]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4667]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4668]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4669]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4670]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4671]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4672]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4673]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4674]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4675]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4676]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4677]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4678]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.4010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4679]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4680]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4681]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4682]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4683]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4684]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4685]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4686]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4687]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4688]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4689]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4690]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.3020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4691]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4692]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4693]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4694]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4695]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4696]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4697]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4698]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4699]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4700]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4701]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4702]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4703]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.2030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4704]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4705]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4706]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4707]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4708]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4709]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4710]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4711]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4712]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4713]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4714]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4715]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.1050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4716]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4717]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4718]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4719]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4720]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4721]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4722]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4723]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4724]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4725]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4726]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4727]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4728]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:56.0020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4729]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4730]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4731]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4732]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4733]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4734]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4735]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4736]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4737]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4738]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4739]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4740]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.9060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4741]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4742]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4743]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4744]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4745]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4746]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4747]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4748]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4749]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4750]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4751]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4752]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.8070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4753]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.7980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4754]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.7890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4755]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.7800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4756]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.7130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4757]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.7070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4758]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.7000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4759]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.6930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4760]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T23:26:55.6840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[4761]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[4762]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[4763]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[4764]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[4765]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[4766]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[4767]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[4768]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[4769]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[4770]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[4771]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" 

Event[4772]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[4773]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[4774]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[4775]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{5ab45862-c060-11ee-8957-6245b4eb6eb6}" 

Event[4776]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[4777]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca0-31dd-9bac-2041830 

Event[4778]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[4779]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[4780]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T23:26:52.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[4781]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T23:24:17.7230000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000003). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4782]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T23:24:17.7120000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4783]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T23:22:47.2930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?03T23:22:47.207858800Z from ?2024?-?02?-?03T23:22:47.207443900Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 24628).

RTC time: ?2024?-?02?-?03T23:22:47.207858800Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4784]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T23:22:47.2080000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[4785]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T23:22:47.2070000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[4786]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T23:22:47.2060000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[4787]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T23:22:06.5620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000003). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4788]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T23:22:06.5540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001320000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4789]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T23:22:01.7320000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001320000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4790]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T23:21:57.5490000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4791]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T23:18:29.4750000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 15 to 17.

Reason InputAccelerometer 

BootId: 22 

Event[4792]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T21:25:36.0190000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 14 to 15.

Reason SessionUnlock 

BootId: 22 

Event[4793]
  Log Name: System
  Source: Microsoft-Windows-DNS-Client
  Date: 2024-02-03T20:26:11.8310000Z
  Event ID: 1014
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-20
  User Name: NT AUTHORITY\NETWORK SERVICE
  Computer: PC-Main
  Description: 
Name resolution for the name cdn-checkout.joinhoney.com timed out after none of the configured DNS servers responded. Client PID 13796. 

Event[4794]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T18:24:17.7290000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000003). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4795]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T18:24:17.7030000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4796]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T18:22:06.5700000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000003). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4797]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T18:22:06.5600000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000007). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4798]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T18:22:01.7510000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000007). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4799]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T18:21:57.5560000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4800]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T18:20:08.4430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\NearbyShareLauncher_xyz345f542f50\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\8549c8038f46d4f3_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4801]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T18:20:08.4420000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NearbyShareLauncher_xyz345f542f50\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4802]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T18:20:08.4410000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NearbyShareLauncher_xyz345f542f50\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4803]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T17:35:30.6650000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl690207c0
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B6F34F82-48A7-428B-9970-12847E1B6294}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[4804]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T17:35:30.6180000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3155.0) - Current Channel (Broad) 

Event[4805]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T17:35:26.2030000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3155.0) - Current Channel (Broad) 

Event[4806]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T17:35:25.9050000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4807]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-03T17:16:17.7800000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 257442 seconds since the last report. 

Event[4808]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-03T17:16:17.7800000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 257442 seconds since the last report. 

Event[4809]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-03T17:16:17.7800000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 257442 seconds since the last report. 

Event[4810]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-03T17:16:17.7800000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 257442 seconds since the last report. 

Event[4811]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-03T17:16:17.7640000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 257442 seconds since the last report. 

Event[4812]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-03T17:16:17.7640000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 257442 seconds since the last report. 

Event[4813]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-03T17:16:17.7640000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 257442 seconds since the last report. 

Event[4814]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-02-03T17:16:17.7640000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 257442 seconds since the last report. 

Event[4815]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T16:08:16.1750000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\89bd9d0d86d0fab0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4816]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T16:00:54.3240000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4817]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T15:58:50.2230000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4818]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T15:27:30.2330000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[4819]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T15:25:11.2060000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4820]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T15:08:07.1970000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4821]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T14:51:03.1940000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4822]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T14:38:45.7990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[4823]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T14:33:59.1940000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4824]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:25:22.4090000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4825]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T14:20:40.6900000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4826]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T14:18:36.6220000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4827]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:39.5210000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NCBCSZSJRSB-SpotifyAB.SpotifyMusic 

Event[4828]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:17:38.4520000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4829]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:38.1310000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NCBCSZSJRSB-SpotifyAB.SpotifyMusic 

Event[4830]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:17:37.4930000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\SpotifyAB.SpotifyMusic_1.230.1135.0_x64__zpdnekdrzrea0\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[4831]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:31.5970000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience. 

Event[4832]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:31.4230000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience 

Event[4833]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:17:30.5210000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_424.1301.40.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[4834]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:30.0770000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer 

Event[4835]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:17:28.9550000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4836]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:28.5890000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NBLGGH42THS-Microsoft.Microsoft3DViewer 

Event[4837]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:28.1360000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4838]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:17:22.6760000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Microsoft3DViewer_7.2401.29012.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[4839]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:22.3920000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS 

Event[4840]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:20.7640000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS 

Event[4841]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:17:19.5550000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_16005.14326.21798.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[4842]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:17.9770000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4843]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:13.3970000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9PCFS5B6T72H-Microsoft.Paint 

Event[4844]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:12.1410000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9PCFS5B6T72H-Microsoft.Paint 

Event[4845]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:17:10.8250000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Paint_11.2311.30.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[4846]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T14:17:05.5630000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl056f0845
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6E4F1C4D-54D8-4EAF-9407-695E4FA4E8E7}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[4847]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:05.5170000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3148.0) - Current Channel (Broad) 

Event[4848]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:05.5170000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4849]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:04.8280000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NZKPSTSNW4P-Microsoft.XboxGamingOverlay 

Event[4850]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:03.8110000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NZKPSTSNW4P-Microsoft.XboxGamingOverlay 

Event[4851]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:17:03.7980000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4852]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:17:02.1450000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGamingOverlay_6.124.1221.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[4853]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:59.5790000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3148.0) - Current Channel (Broad) 

Event[4854]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:59.3190000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4855]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:59.3190000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4856]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:57.2170000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3P2-MICROSOFT.ZUNEVIDEO 

Event[4857]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:55.8150000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJ3P2-MICROSOFT.ZUNEVIDEO 

Event[4858]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:55.8150000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4859]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:55.3870000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9N4D0MSMP0PT-Microsoft.VP9VideoExtensions 

Event[4860]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:54.3170000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4861]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:53.5370000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9P1J8S7CCWWT-Clipchamp.Clipchamp 

Event[4862]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:52.9080000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4863]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:16:52.2680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4864]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:52.0710000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9P1J8S7CCWWT-Clipchamp.Clipchamp 

Event[4865]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:51.8830000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9N4D0MSMP0PT-Microsoft.VP9VideoExtensions 

Event[4866]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:16:51.4110000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4867]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:51.1500000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9N4D0MSMP0PT-Microsoft.VP9VideoExtensions 

Event[4868]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:49.7710000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4869]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:49.0640000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4870]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:42.1440000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4871]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:41.7550000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4872]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-03T14:16:41.7550000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[4873]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T14:16:40.7000000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from auto start to demand start. 

Event[4874]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T14:16:40.6690000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\System32\SMI\Store\Machine\SCHEMA.DAT was cleared updating 14861 keys and creating 2497 modified pages. 

Event[4875]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T14:16:39.2000000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[4876]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T14:16:39.1880000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4877]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T14:16:39.1810000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from demand start to auto start. 

Event[4878]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:03:55.2720000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4879]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T14:03:55.2650000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4880]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:51.3800000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4881]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:51.3730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4882]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:51.2710000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4883]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:51.2660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000004). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4884]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:42.7440000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000004). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4885]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:42.7290000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000006). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4886]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:42.6230000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000006). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4887]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:42.6170000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000003). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4888]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:34.6130000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4889]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:34.6060000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000004). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4890]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:34.5060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4891]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:34.5000000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4892]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:30.5530000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4893]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:30.5390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4894]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:30.4360000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4895]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:30.4300000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000003). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4896]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:26.4320000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000003). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4897]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:26.4160000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4898]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:26.3180000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4899]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:26.3100000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4900]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:22.3660000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4901]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:22.3460000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4902]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:22.2380000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4903]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:22.2340000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4904]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:07.0030000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4905]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:06.9980000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000005). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4906]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T14:01:02.1820000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000005). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4907]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T14:00:57.9940000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4908]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T13:24:50.0670000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000003). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4909]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T13:24:50.0610000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4910]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T13:22:46.1750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4911]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T13:22:46.1700000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4912]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T13:22:46.0760000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4913]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T13:22:46.0710000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000004). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4914]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T13:22:06.5930000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000004). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4915]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T13:22:06.5700000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000003). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4916]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-03T13:22:01.8170000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000003). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[4917]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T13:21:57.5660000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4918]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T13:21:02.1760000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4919]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T13:19:52.7700000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 12 to 14.

Reason InputAccelerometer 

BootId: 22 

Event[4920]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T13:19:18.5810000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 11 to 12.

Reason SessionUnlock 

BootId: 22 

Event[4921]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T13:19:14.4890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[4922]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:18:45.2880000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 14 keys and creating 3 modified pages. 

Event[4923]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T13:18:12.7330000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[4924]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:17:02.6530000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\MicrosoftTeams_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\5642b34cd579aee4_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4925]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:16:59.9500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?03T13:16:59.868568900Z from ?2024?-?02?-?03T13:16:59.868381600Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 14448).

RTC time: ?2024?-?02?-?03T13:16:59.868568900Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4926]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:16:59.8680000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[4927]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:16:59.8680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?03T13:16:59.785157400Z from ?2024?-?02?-?03T13:16:59.784399900Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 14448).

RTC time: ?2024?-?02?-?03T13:16:59.785157400Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4928]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:16:59.7850000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[4929]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T13:16:59.7850000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[4930]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:16:59.7840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?03T13:16:59.702170600Z from ?2024?-?02?-?03T13:17:07.457666700Z.
Time Delta: -7755 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 14448).

RTC time: ?2024?-?02?-?03T13:16:59.702170600Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4931]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:16:59.7020000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[4932]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T13:17:07.3520000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4933]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:17:06.4040000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[4934]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25448. 

Event[4935]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25448. 

Event[4936]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[4937]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[4938]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4939]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[4940]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[4941]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[4942]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[4943]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[4944]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[4945]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{5ab45862-c060-11ee-8957-6245b4eb6eb6}" 

Event[4946]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[4947]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[4948]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[4949]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[4950]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[4951]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[4952]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[4953]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca0-31dd-9ba 

Event[4954]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 3; device name: \Volume{234e3a45-fca0-31dd-9bac-204183070f1e}. 

Event[4955]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[4956]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca0-31dd-9bac-204183070f1e}" created 

Event[4957]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[4958]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[4959]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[4960]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[4961]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[4962]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 3l 

Event[4963]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[4964]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[4965]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T13:16:55.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[4966]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T13:16:52.6560000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4967]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T13:16:51.4660000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[4968]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T13:16:16.1870000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[4969]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T13:16:11.7260000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4970]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-03T13:16:11.7230000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[4971]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-03T13:16:11.5630000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[4972]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-02-03T13:16:10.9390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?02?-?03T00:55:52.858275600Z
Wake Time: ?2024?-?02?-?03T13:16:09.868156500Z

Wake Source: Unknown 

Event[4973]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-03T13:16:10.6830000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[4974]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T13:16:09.9700000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 9 to 11.

Reason Unknown 

BootId: 22 

Event[4975]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-03T13:16:09.9560000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[4976]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T13:16:09.8040000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4977]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T13:16:09.7890000Z
  Event ID: 134
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) 

Event[4978]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T13:16:09.7780000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 8 to 9.

Reason SxTransition 

BootId: 22 

Event[4979]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-03T13:16:09.7770000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[4980]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-03T13:16:09.7770000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[4981]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-03T13:16:09.7770000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[4982]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-03T13:16:09.0840000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[4983]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T13:16:08.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?03T13:16:08.500000000Z from ?2024?-?02?-?03T00:56:00.596388000Z.
Time Delta: 44407903 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?03T13:16:08.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4984]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T00:56:00.5960000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[4985]
  Log Name: System
  Source: EventLog
  Date: 2024-02-03T13:16:08.8410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 243112 seconds. 

Event[4986]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-03T00:55:56.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?03T00:55:56.500000000Z from ?2024?-?02?-?03T00:55:54.229400100Z.
Time Delta: 2270 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?03T00:55:56.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[4987]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T00:55:53.7090000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[4988]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-02-03T00:55:53.6980000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[4989]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T00:55:53.0780000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[4990]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T00:55:52.8610000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 7 to 8.

Reason Unknown 

BootId: 22 

Event[4991]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-03T00:55:52.8580000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[4992]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-03T00:55:52.4550000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[4993]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[4994]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[4995]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[4996]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[4997]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[4998]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[4999]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[5000]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[5001]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[5002]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[5003]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" 

Event[5004]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[5005]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[5006]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[5007]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{5ab44611-c060-11ee-8957-6245b4eb6eb6}" 

Event[5008]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[5009]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca3-31dd-9bac-2041830 

Event[5010]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[5011]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-03T00:55:45.8540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[5012]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T00:38:47.4470000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5013]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-03T00:36:29.9150000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5014]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T23:54:52.5250000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl7526c101
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FD86B849-FB24-427E-8A87-C86D317CDD0E}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5015]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-02T23:54:52.4890000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3115.0) - Current Channel (Broad) 

Event[5016]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-02T23:54:48.1470000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3115.0) - Current Channel (Broad) 

Event[5017]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-02T23:54:48.1470000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[5018]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T23:33:03.1210000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5019]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T23:30:58.9230000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5020]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T23:16:18.1720000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5021]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T21:25:27.1530000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000003). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5022]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T21:25:27.1400000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5023]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T21:23:19.2670000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000003). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5024]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T21:23:19.2580000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5025]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T21:23:19.1540000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5026]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T21:23:19.1490000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5027]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T21:22:59.9650000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5028]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T21:22:59.9540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5029]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T21:22:55.0810000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5030]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T21:22:50.9500000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5031]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T18:10:59.0710000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5032]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T17:54:45.1850000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5033]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T17:51:10.6250000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[5034]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T17:51:10.3590000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 12 keys and creating 1 modified pages. 

Event[5035]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T17:51:10.3530000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 19 keys and creating 2 modified pages. 

Event[5036]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T17:11:52.6100000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5037]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T16:46:54.5810000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5038]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T16:29:08.2950000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5039]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:25:23.4220000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5040]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T16:25:23.3980000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5041]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:19.5130000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5042]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:19.5080000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5043]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:19.4060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5044]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:19.4010000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5045]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:15.4080000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5046]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:15.4020000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5047]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:15.2990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5048]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:15.2840000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000002). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5049]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:11.2820000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000002). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5050]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:11.2720000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5051]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:11.1720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5052]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:23:11.1650000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5053]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:22:59.9840000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5054]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:22:59.9610000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5055]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-02-02T16:22:55.1140000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x746C Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5056]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T16:22:50.9460000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5057]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T14:16:53.5300000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5058]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T14:15:50.6340000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5059]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T13:07:22.2430000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5060]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T12:49:40.0390000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5061]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T12:28:54.0410000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[5062]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T12:28:53.9860000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 22 keys and creating 2 modified pages. 

Event[5063]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T12:28:53.9850000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 16 keys and creating 1 modified pages. 

Event[5064]
  Log Name: System
  Source: EventLog
  Date: 2024-02-02T12:00:00.0450000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 152143 seconds. 

Event[5065]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T11:24:55.8180000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl26c5f761
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3206E4BD-5CD7-48F6-8453-480280571E8A}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5066]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-02T11:24:55.7810000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3092.0) - Current Channel (Broad) 

Event[5067]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-02T11:24:51.4930000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3092.0) - Current Channel (Broad) 

Event[5068]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-02-02T11:24:51.4930000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[5069]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:24:39.7980000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\PocketpairInc.Palworld_ad4psfrxyesvt\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5070]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:23:19.8620000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\GameraGame.DysonSphereProgram_2wj4xdcanw8jj\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5071]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T11:22:53.8600000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5072]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T11:21:58.5730000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5073]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T11:20:42.9370000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5074]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T11:17:30.3380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[5075]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:17:00.7690000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\AdobeNotificationClient_enpm4xejd91yc\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\d440d192328ab755_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5076]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:17:00.7680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5077]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:17:00.7660000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\User.dat was cleared updating 7 keys and creating 1 modified pages. 

Event[5078]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T11:16:55.8870000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5079]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:16:05.5150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\Settings\settings.dat was cleared updating 28 keys and creating 5 modified pages. 

Event[5080]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T11:15:34.3570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5081]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T11:15:29.0400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5082]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T11:15:29.0160000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5083]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:27.8170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[5084]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3640000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 24052. 

Event[5085]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3640000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 24052. 

Event[5086]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3640000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[5087]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[5088]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5089]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5090]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[5091]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[5092]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[5093]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[5094]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[5095]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{5ab44611-c060-11ee-8957-6245b4eb6eb6}" 

Event[5096]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[5097]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[5098]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[5099]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[5100]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[5101]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[5102]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[5103]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca3-31dd-9ba 

Event[5104]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 2; device name: \Volume{234e3a45-fca3-31dd-9bac-204183070f1e}. 

Event[5105]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[5106]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca3-31dd-9bac-204183070f1e}" created 

Event[5107]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[5108]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[5109]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[5110]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[5111]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[5112]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3590000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 2l 

Event[5113]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3590000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[5114]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3590000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[5115]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-02T11:15:25.3590000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[5116]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T11:15:23.6790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5117]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:14:56.6070000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\1415fa5ee119e2ff_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5118]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-02T11:14:51.6490000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5119]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-02T11:14:48.6590000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[5120]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:14:47.9140000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[5121]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:14:46.8060000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\d52ea4425f069fe_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5122]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T11:14:45.2060000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5123]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-02-02T11:14:45.2040000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5124]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-02-02T11:14:44.8940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?02?-?01T00:03:57.058156000Z
Wake Time: ?2024?-?02?-?02T11:14:43.835889100Z

Wake Source: Unknown 

Event[5125]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-02T11:14:44.6480000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[5126]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-02T11:14:43.9330000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 5 to 7.

Reason Unknown 

BootId: 22 

Event[5127]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-02T11:14:43.7640000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason SxTransition 

BootId: 22 

Event[5128]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-02T11:14:43.7630000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[5129]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-02T11:14:43.7630000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[5130]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-02-02T11:14:43.7630000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[5131]
  Log Name: System
  Source: BTHUSB
  Date: 2024-02-02T11:14:43.7150000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[5132]
  Log Name: System
  Source: e2fexpress
  Date: 2024-02-02T11:14:43.0720000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[5133]
  Log Name: System
  Source: EventLog
  Date: 2024-02-02T11:14:42.8410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 149426 seconds. 

Event[5134]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-02T11:14:42.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?02T11:14:42.500000000Z from ?2024?-?02?-?01T00:04:03.396069400Z.
Time Delta: 126639103 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?02T11:14:42.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[5135]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-01T00:04:03.3960000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[5136]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-02-01T00:03:59.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?02?-?01T00:03:59.500000000Z from ?2024?-?02?-?01T00:03:58.493873200Z.
Time Delta: 1006 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?02?-?01T00:03:59.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[5137]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-01T00:03:57.3780000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[5138]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-01T00:03:57.0600000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 3 to 4.

Reason InputAccelerometer 

BootId: 22 

Event[5139]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-02-01T00:03:57.0580000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[5140]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-02-01T00:03:56.6000000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[5141]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[5142]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[5143]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[5144]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[5145]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5146]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5147]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[5148]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[5149]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[5150]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[5151]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[5152]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[5153]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{db544902-c022-11ee-8954-086ac578260b}" 

Event[5154]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[5155]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[5156]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[5157]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[5158]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[5159]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[5160]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-02-01T00:03:55.0300000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[5161]
  Log Name: System
  Source: User32
  Date: 2024-02-01T00:03:49.5710000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: power off
 Comment:  

Event[5162]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-02-01T00:00:38.2190000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5163]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T23:58:27.5340000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5164]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T23:33:02.8560000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5165]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T23:30:58.5920000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5166]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T22:13:37.3820000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[5167]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T22:02:04.6200000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5168]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:27.4190000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL01\B&68C9DCB&0&0000 with the following status: 0. 

Event[5169]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:27.4160000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL01\B&68C9DCB&0&0000 with the following status: 0. 

Event[5170]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:27.4110000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL01\B&68C9DCB&0&0000 with the following status: 0. 

Event[5171]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:26.5420000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL03\B&68C9DCB&0&0002 with the following status: 0. 

Event[5172]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-31T22:01:26.3330000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Program Files\LGHUB\lghub_agent.exe with process id 27992 stopped the removal or ejection for the device HID\VID_046D&PID_C52B&REV_1211&MI_02&Qid_4066&WI_02&Class_0000001E&Col04\b&68c9dcb&0&0003.
Process command line: "C:\Program Files\LGHUB\lghub_agent.exe"
List of affected devices:
HID\VID_046D&PID_C52B&REV_1211&MI_02&Qid_4066&WI_02&Class_0000001E&Col04\b&68c9dcb&0&0003
 

Event[5173]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:21.3090000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL04\B&68C9DCB&0&0003 with the following status: 0. 

Event[5174]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:21.2400000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\B&68C9DCB&0&0001 with the following status: 0. 

Event[5175]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:21.2370000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\B&68C9DCB&0&0001 with the following status: 0. 

Event[5176]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:21.2340000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LMouFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\B&68C9DCB&0&0001 with the following status: 0. 

Event[5177]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:21.2320000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\B&68C9DCB&0&0001 with the following status: 0. 

Event[5178]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:21.0840000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\B&34D141A5&0&0001 with the following status: 0. 

Event[5179]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:21.0820000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\B&34D141A5&0&0001 with the following status: 0. 

Event[5180]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:21.0790000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LMouFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\B&34D141A5&0&0001 with the following status: 0. 

Event[5181]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:21.0760000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\B&34D141A5&0&0001 with the following status: 0. 

Event[5182]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:20.8550000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL01\B&34D141A5&0&0000 with the following status: 0. 

Event[5183]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:20.8520000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL01\B&34D141A5&0&0000 with the following status: 0. 

Event[5184]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:20.8490000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL01\B&34D141A5&0&0000 with the following status: 0. 

Event[5185]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:20.6570000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidEqd for Device Instance ID {A3535E08-EB26-49A9-8AE0-786ED1242812}\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E\A&249FCE59&0&02 with the following status: 0. 

Event[5186]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:20.4840000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidEqd for Device Instance ID {A3535E08-EB26-49A9-8AE0-786ED1242812}\VID_046D&PID_C52B&REV_1211&MI_02\A&249FCE59&0&00 with the following status: 0. 

Event[5187]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:20.4240000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidEqd for Device Instance ID {A3535E08-EB26-49A9-8AE0-786ED1242812}\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006\A&249FCE59&0&01 with the following status: 0. 

Event[5188]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:20.2970000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_046D&PID_C52B&MI_00\9&158BD0D7&0&0000 with the following status: 0. 

Event[5189]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-31T22:01:20.1600000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LEqdUsb for Device Instance ID USB\VID_046D&PID_C52B&MI_02\9&158BD0D7&0&0002 with the following status: 0. 

Event[5190]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T22:01:20.1060000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  LNonPnP
Service File Name:  C:\WINDOWS\System32\Drivers\LNonPnP.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5191]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T21:59:58.9340000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 3.

Reason InputAccelerometer 

BootId: 22 

Event[5192]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T21:54:51.9340000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason SessionUnlock 

BootId: 22 

Event[5193]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T21:14:45.3630000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5194]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T21:12:41.1250000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5195]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T17:54:32.6300000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[5196]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:48:38.0400000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5197]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:47:05.9590000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsle8206d70
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DEE5885D-5490-4808-B1DA-2249988AC6FB}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5198]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:46:38.9710000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5199]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:46:38.9700000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5200]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:46:38.9700000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5201]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:46:11.9020000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5202]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:58.0010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25160. 

Event[5203]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:58.0010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25160. 

Event[5204]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:58.0010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[5205]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:58.0010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[5206]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:58.0010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5207]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:58.0010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5208]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:58.0000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[5209]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:58.0000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[5210]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[5211]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{db544902-c022-11ee-8954-086ac578260b}" 

Event[5212]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[5213]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[5214]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[5215]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[5216]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5217]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[5218]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5219]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[5220]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[5221]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[5222]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[5223]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[5224]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[5225]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[5226]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[5227]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[5228]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[5229]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[5230]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[5231]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[5232]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[5233]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:45:57.9970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[5234]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:45:54.5120000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5235]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:45:35.2520000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5236]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:45:35.2520000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5237]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:45:35.2520000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5238]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:45:35.2520000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5239]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:45:35.2360000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5240]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:45:35.2360000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5241]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:45:35.2360000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5242]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:45:35.2360000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5243]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:57.9950000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/b6435e72-4996-4a6e-8865-aed3297634ec/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x15EC Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[5244]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:57.9950000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001720000001. Status 0x0. Process Id 0x15EC Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[5245]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:44:57.5350000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5246]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:44:57.5330000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5247]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-31T17:44:57.3200000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[5248]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:44:42.5130000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5249]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-31T17:44:38.4200000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[5250]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-31T17:44:38.2710000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[5251]
  Log Name: System
  Source: TPM
  Date: 2024-01-31T17:44:37.6880000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[5252]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:35.2310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5253]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:44:33.6610000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[5254]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-01-31T17:44:33.3750000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[5255]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.2490000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x187C Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[5256]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.2490000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001320000001. Status 0x0. Process Id 0x187C Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[5257]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-31T17:44:33.2180000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[5258]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-31T17:44:33.1700000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[5259]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5260]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5261]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5262]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5263]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5264]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5265]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5266]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5267]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5268]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5269]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5270]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5271]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5272]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5273]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5274]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5275]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:44:33.1270000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5276]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-31T17:44:31.9860000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[5277]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T17:44:31.9790000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[5278]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T17:44:31.9790000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[5279]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T17:44:31.9790000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[5280]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:31.9430000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5281]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:31.9400000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5282]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:31.9360000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5283]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:31.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[5284]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:31.9360000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5285]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:31.9310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5286]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:31.9230000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5287]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:31.9190000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5288]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:44:31.4190000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[5289]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T17:44:30.5820000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[5290]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T17:44:30.5820000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[5291]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T17:44:30.5790000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[5292]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5720000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[5293]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5710000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[5294]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5610000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[5295]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5580000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[5296]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-01-31T17:44:30.5550000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffff8001b872d180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\013124-14140-01.dmp. Report Id: 665bad1f-2b08-4154-81c1-5be7e336f893. 

Event[5297]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5460000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[5298]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5440000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[5299]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5420000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[5300]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5370000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[5301]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5270000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[5302]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5230000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[5303]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:44:30.5120000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[5304]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-31T17:44:30.4880000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[5305]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-31T17:44:30.4880000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[5306]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-31T17:44:28.9210000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[5307]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T17:44:28.5590000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[5308]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:44:28.0900000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[5309]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:44:27.7220000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[5310]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-31T17:44:26.9140000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[5311]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:44:26.7140000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[5312]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:44:26.4450000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[5313]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-31T17:44:26.2860000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[5314]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-31T17:44:24.4390000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[5315]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:44:24.2350000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5316]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:44:24.2350000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5317]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:44:24.1870000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5318]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:44:24.1870000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5319]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:44:24.1720000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5320]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:44:24.1560000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[5321]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-31T17:44:24.1560000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[5322]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-31T17:44:24.0930000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[5323]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.1000000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5324]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5325]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5326]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5327]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5328]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5329]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[5330]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[5331]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5332]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5333]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5334]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0760000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5335]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5336]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0720000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5337]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5338]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5339]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0640000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5340]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0630000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5341]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0590000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5342]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0580000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5343]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0570000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5344]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5345]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0550000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5346]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:44:24.0420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[5347]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T17:44:23.7280000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[5348]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T17:44:23.7170000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[5349]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T17:44:23.7160000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[5350]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:23.6900000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5351]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:23.5940000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5352]
  Log Name: System
  Source: volmgr
  Date: 2024-01-31T17:44:23.5500000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[5353]
  Log Name: System
  Source: volmgr
  Date: 2024-01-31T17:44:23.5500000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[5354]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:44:23.5220000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[5355]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:18.7840000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5356]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:18.7830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5357]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:44:18.7830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5358]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-31T17:44:17.1230000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[5359]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T17:44:32.0750000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[5360]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T17:44:32.0750000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[5361]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T17:44:32.0750000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[5362]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T17:44:32.0750000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 17:34:28 on ?31/?01/?2024 was unexpected. 

Event[5363]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T17:44:17.0760000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[5364]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:44:17.0710000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[5365]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:44:17.0710000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[5366]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:44:17.0710000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[5367]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:44:17.0710000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?31T17:44:15.000000000Z. 

Event[5368]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:44:17.0710000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[5369]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:44:17.0710000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[5370]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:44:17.0710000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[5371]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:44:17.0710000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[5372]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T17:44:17.0710000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?31T17:44:16.500000000Z. 

Event[5373]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:42:48.0540000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5374]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:41:25.2010000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000001). Process Id 0x3620 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5375]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:41:25.1900000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5376]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:39:18.1020000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x3620 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5377]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:39:18.0970000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000001). Process Id 0x3620 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5378]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:39:13.2350000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x3620 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5379]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:39:09.0930000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5380]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:39:02.3860000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5381]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:38:11.7090000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5382]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 23500. 

Event[5383]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 23500. 

Event[5384]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[5385]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[5386]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5387]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5388]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[5389]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[5390]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[5391]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{db544902-c022-11ee-8954-086ac578260b}" 

Event[5392]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[5393]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[5394]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[5395]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[5396]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[5397]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5398]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5399]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[5400]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[5401]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[5402]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[5403]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[5404]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[5405]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[5406]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[5407]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[5408]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[5409]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[5410]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[5411]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[5412]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[5413]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:37:57.9850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[5414]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:37:56.9860000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5415]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:37:01.8330000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsldf90c890
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DEE5885D-5490-4808-B1DA-2249988AC6FB}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5416]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:36:51.4790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5417]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:36:51.4760000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5418]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-31T17:36:51.2340000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[5419]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:36:30.5140000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5420]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:36:29.5430000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/80b8a60c-6017-4787-a996-721e962dd554/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x1678 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[5421]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:36:29.5430000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001120000001. Status 0x0. Process Id 0x1678 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[5422]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:35:25.2390000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5423]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:35:25.2390000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5424]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:35:25.2390000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5425]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:35:25.2390000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5426]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:35:25.2230000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5427]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:35:25.2230000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5428]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:35:25.2230000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5429]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:35:25.2230000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5430]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:34:38.7500000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5431]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:31.0640000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5432]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-31T17:34:30.8950000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[5433]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-31T17:34:30.6970000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[5434]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-01-31T17:34:29.8280000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[5435]
  Log Name: System
  Source: TPM
  Date: 2024-01-31T17:34:29.4530000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[5436]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T17:34:29.4520000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[5437]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-31T17:34:29.3370000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[5438]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.3160000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x17E4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[5439]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.3160000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000A20000001. Status 0x0. Process Id 0x17E4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[5440]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-31T17:34:29.2770000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[5441]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5442]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5443]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5444]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5445]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5446]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5447]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5448]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5449]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5450]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5451]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5452]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5453]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5454]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5455]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5456]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5457]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T17:34:29.2230000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5458]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-31T17:34:28.0330000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[5459]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T17:34:28.0280000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[5460]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T17:34:28.0280000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[5461]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T17:34:28.0280000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[5462]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:28.0150000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5463]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:28.0120000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5464]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:28.0070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5465]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:28.0070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[5466]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:28.0070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5467]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:28.0020000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5468]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:27.9940000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5469]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:27.9890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5470]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T17:34:27.6560000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[5471]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T17:34:27.6560000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[5472]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T17:34:27.6530000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[5473]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.6450000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[5474]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.6450000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[5475]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.6350000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[5476]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.6320000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[5477]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.6190000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[5478]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.6170000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[5479]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.6150000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[5480]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-01-31T17:34:27.6130000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffff9b015f32d180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\013124-21203-01.dmp. Report Id: 7c6d4f21-7b2d-4194-a60a-6b19b17f8b38. 

Event[5481]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.6090000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[5482]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.5980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[5483]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.5940000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[5484]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T17:34:27.5830000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[5485]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-31T17:34:27.5590000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[5486]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-31T17:34:27.5590000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[5487]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-31T17:34:25.9860000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[5488]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T17:34:25.6190000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[5489]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:34:25.1390000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[5490]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:34:24.7910000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[5491]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:34:23.6460000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[5492]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:34:21.7380000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[5493]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:34:17.0870000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[5494]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-31T17:34:16.9360000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[5495]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-31T17:34:15.1880000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[5496]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-31T17:34:14.4270000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[5497]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:34:14.2370000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5498]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:34:14.2370000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5499]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:34:14.1740000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5500]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:34:14.1740000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5501]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:34:14.1590000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5502]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T17:34:14.1430000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[5503]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-31T17:34:14.1430000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[5504]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-31T17:34:14.0810000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[5505]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5506]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5507]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5508]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5509]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5510]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0760000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[5511]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5512]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5513]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5514]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5515]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5516]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0640000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5517]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5518]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0590000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5519]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0560000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5520]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0550000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5521]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5522]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5523]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5524]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5525]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0450000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5526]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0440000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5527]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5528]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T17:34:14.0290000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[5529]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T17:34:13.7160000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[5530]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T17:34:13.7050000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[5531]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T17:34:13.7040000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[5532]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:13.6770000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5533]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:13.5830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5534]
  Log Name: System
  Source: volmgr
  Date: 2024-01-31T17:34:13.5420000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[5535]
  Log Name: System
  Source: volmgr
  Date: 2024-01-31T17:34:13.5420000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[5536]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T17:34:13.5040000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[5537]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:08.5570000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5538]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:08.5560000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5539]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T17:34:08.5560000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5540]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T17:34:28.1480000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 21 seconds. 

Event[5541]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T17:34:28.1470000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[5542]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T17:34:28.1470000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[5543]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T17:34:28.1470000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 17:20:14 on ?31/?01/?2024 was unexpected. 

Event[5544]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-31T17:34:07.1350000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[5545]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T17:34:07.0790000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[5546]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:34:07.0740000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[5547]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:34:07.0740000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[5548]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:34:07.0740000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[5549]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:34:07.0740000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?31T17:34:06.000000000Z. 

Event[5550]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:34:07.0740000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[5551]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:34:07.0740000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[5552]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:34:07.0740000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[5553]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T17:34:07.0740000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[5554]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T17:34:07.0730000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?31T17:34:06.500000000Z. 

Event[5555]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:23:03.9100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[5556]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T17:22:38.4670000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[5557]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:21:43.1530000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5558]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 30632. 

Event[5559]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 30632. 

Event[5560]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[5561]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[5562]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5563]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5564]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[5565]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[5566]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[5567]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{db544902-c022-11ee-8954-086ac578260b}" 

Event[5568]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[5569]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[5570]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[5571]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[5572]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5573]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[5574]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5575]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[5576]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[5577]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[5578]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[5579]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[5580]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[5581]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[5582]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[5583]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[5584]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[5585]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[5586]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[5587]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[5588]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[5589]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T17:21:32.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[5590]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:21:28.9450000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5591]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:20:52.5840000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5592]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:20:43.7040000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5593]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T17:20:43.7010000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5594]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-31T17:20:43.3860000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[5595]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T17:18:56.5330000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5596]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T17:01:52.5280000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5597]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T16:44:48.5220000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5598]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T16:27:44.5200000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5599]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T16:14:19.7150000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5600]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T16:13:06.6880000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{A7D489D7-184E-4A30-9E1B-4AB9A9D47615} was cleared updating 14861 keys and creating 2497 modified pages. 

Event[5601]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T16:13:03.8180000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\WINDOWS\System32\config\DRIVERS (TM: {c511b048-c051-11ee-8955-6245b4eb6eb6}, RM: {c511b047-c051-11ee-8955-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[5602]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T16:13:03.7980000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\WINDOWS\System32\config\SYSTEM (TM: {c511b045-c051-11ee-8955-6245b4eb6eb6}, RM: {c511b044-c051-11ee-8955-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[5603]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T16:13:00.6150000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy3) is healthy.  No action is needed. 

Event[5604]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T16:12:15.5370000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5605]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T16:10:29.6620000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3000.0) - Current Channel (Broad) 

Event[5606]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T16:10:29.6490000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslddb7e9ec
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DEE5885D-5490-4808-B1DA-2249988AC6FB}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5607]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T16:10:25.4020000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.3000.0) - Current Channel (Broad) 

Event[5608]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T16:10:25.4020000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[5609]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T16:10:24.5230000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[5610]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T16:10:24.5100000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5611]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T16:02:49.2030000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslb36742a5
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FF632837-DB7B-4D73-840D-FBFBC11DD2D3}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5612]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T16:02:18.0560000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5613]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:02:16.9520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/888a66d5-8b49-4e08-a918-f84f56f9b9e5/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x16B8 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[5614]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:02:16.9520000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001420000001. Status 0x0. Process Id 0x16B8 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[5615]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:01:11.3610000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5616]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:01:11.3610000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5617]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:01:11.3610000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5618]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:01:11.3610000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5619]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:01:11.3450000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5620]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:01:11.3450000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5621]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:01:11.3450000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5622]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:01:11.3450000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5623]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T16:00:26.4830000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5624]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T16:00:18.5160000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5625]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-31T16:00:18.0890000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[5626]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-31T16:00:17.9120000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[5627]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-01-31T16:00:16.9720000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[5628]
  Log Name: System
  Source: TPM
  Date: 2024-01-31T16:00:16.8430000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[5629]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T16:00:16.8410000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[5630]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-31T16:00:16.7090000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[5631]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.6990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFF00000420000001). Status: 0x0. Process Id 0x1864 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[5632]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.6990000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFF00000420000001. Status 0x0. Process Id 0x1864 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[5633]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-31T16:00:16.6560000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[5634]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5635]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5636]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5637]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5638]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5639]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5640]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5641]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5642]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5643]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5644]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5645]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5646]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5647]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5648]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5649]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5650]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T16:00:16.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5651]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-31T16:00:14.0140000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[5652]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T16:00:14.0040000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[5653]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T16:00:14.0040000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[5654]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T16:00:14.0040000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[5655]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T16:00:13.9790000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5656]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T16:00:13.9740000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5657]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T16:00:13.9710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5658]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T16:00:13.9710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[5659]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T16:00:13.9710000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5660]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T16:00:13.9640000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5661]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T16:00:13.9560000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5662]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T16:00:13.9520000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5663]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T16:00:13.5650000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[5664]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T16:00:13.5650000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[5665]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T16:00:13.5620000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[5666]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5540000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[5667]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5540000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[5668]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5440000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[5669]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5410000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[5670]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-01-31T16:00:13.5360000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffffab003c92d180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\013124-21125-01.dmp. Report Id: d9dc828b-ea7c-44bb-acc0-f003c4ada82f. 

Event[5671]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5280000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[5672]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5260000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[5673]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5240000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[5674]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5190000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[5675]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5090000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[5676]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.5050000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[5677]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T16:00:13.4940000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[5678]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-31T16:00:13.4690000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[5679]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-31T16:00:13.4690000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[5680]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-31T16:00:12.0320000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[5681]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T16:00:11.7570000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[5682]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T16:00:11.2690000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[5683]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T16:00:10.9250000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[5684]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T16:00:09.7910000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[5685]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T16:00:07.8570000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[5686]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-31T16:00:03.0570000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[5687]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T16:00:02.2830000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[5688]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-31T16:00:01.1070000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[5689]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-31T16:00:00.5170000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[5690]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T16:00:00.3440000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5691]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T16:00:00.3440000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5692]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T16:00:00.2810000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5693]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T16:00:00.2810000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5694]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T16:00:00.2650000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5695]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T16:00:00.2500000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[5696]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-31T16:00:00.2500000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[5697]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-31T16:00:00.2030000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[5698]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.2070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5699]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.2060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5700]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.2050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5701]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.2040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5702]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5703]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5704]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1960000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5705]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[5706]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5707]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5708]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5709]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5710]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5711]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5712]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5713]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5714]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1710000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5715]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5716]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5717]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5718]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5719]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5720]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5721]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T16:00:00.1520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[5722]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T15:59:59.8380000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[5723]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T15:59:59.8270000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[5724]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T15:59:59.8260000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[5725]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T15:59:59.7990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5726]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T15:59:59.7090000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5727]
  Log Name: System
  Source: volmgr
  Date: 2024-01-31T15:59:59.6790000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[5728]
  Log Name: System
  Source: volmgr
  Date: 2024-01-31T15:59:59.6630000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[5729]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T15:59:59.6470000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[5730]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T15:59:54.8690000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5731]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T15:59:54.8680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5732]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T15:59:54.8680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5733]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T16:00:14.3230000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 21 seconds. 

Event[5734]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T16:00:14.3230000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[5735]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T16:00:14.3230000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[5736]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T16:00:14.3230000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 15:44:24 on ?31/?01/?2024 was unexpected. 

Event[5737]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-31T15:59:53.1140000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[5738]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T15:59:53.0760000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[5739]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T15:59:53.0710000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[5740]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T15:59:53.0700000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[5741]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T15:59:53.0700000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[5742]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T15:59:53.0700000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?31T15:59:51.000000000Z. 

Event[5743]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T15:59:53.0700000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[5744]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T15:59:53.0700000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[5745]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T15:59:53.0700000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[5746]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T15:59:53.0700000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[5747]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T15:59:53.0700000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?31T15:59:52.500000000Z. 

Event[5748]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-31T15:44:15.6860000Z
  Event ID: 36
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. 

Event[5749]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T12:27:05.0120000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Cardinal_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[5750]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T12:00:00.8440000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 5757 seconds. 

Event[5751]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T11:44:26.5200000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5752]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T11:27:22.5200000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5753]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T11:10:18.5190000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5754]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T10:53:14.5190000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5755]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T10:44:04.2480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[5756]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T10:41:05.9700000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5757]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:40:52.0960000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[5758]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:48.7540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[5759]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4060000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 33288. 

Event[5760]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4060000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 33288. 

Event[5761]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4060000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[5762]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4060000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[5763]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4060000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5764]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4060000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[5765]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[5766]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[5767]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[5768]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[5769]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[5770]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{db544902-c022-11ee-8954-086ac578260b}" 

Event[5771]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[5772]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[5773]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[5774]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5775]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[5776]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[5777]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[5778]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[5779]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[5780]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[5781]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[5782]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[5783]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[5784]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[5785]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[5786]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[5787]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[5788]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[5789]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[5790]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-31T10:40:46.4010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[5791]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T10:40:38.5510000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5792]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T10:40:34.3460000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5793]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T10:39:37.0940000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5794]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T10:39:37.0900000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5795]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T10:39:36.9160000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5796]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-31T10:39:36.8040000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[5797]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T10:37:32.6240000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5798]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T10:35:54.5280000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[5799]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-31T10:35:54.5160000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[5800]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T10:34:21.8220000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2990.0) - Current Channel (Broad) 

Event[5801]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T10:34:21.8180000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl94b82fe9
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FF632837-DB7B-4D73-840D-FBFBC11DD2D3}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5802]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:34:17.7950000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.22091.10061.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[5803]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T10:34:17.1870000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2990.0) - Current Channel (Broad) 

Event[5804]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T10:34:16.7690000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[5805]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:34:16.4470000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_16005.14326.21792.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[5806]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:34:11.6880000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Clipchamp.Clipchamp_2.9.1.0_neutral__yxz26nhyzhsrt\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[5807]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T10:34:11.6380000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[5808]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T10:34:06.2280000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[5809]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T10:34:06.2280000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[5810]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-31T10:34:06.2280000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[5811]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T10:27:02.5210000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslc9c0634f
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{27EB39C8-231B-4621-90E7-300A1276D55E}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5812]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-31T10:26:30.1360000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5813]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:26:28.5230000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/77a61c5d-4c07-4014-a41d-e73037eb5936/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x161C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[5814]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:26:28.5220000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001420000001. Status 0x0. Process Id 0x161C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[5815]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:25:24.1130000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5816]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:25:24.1130000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5817]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:25:24.1130000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5818]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:25:24.1130000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5819]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:25:24.0970000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5820]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:25:24.0970000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5821]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:25:24.0970000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5822]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:25:24.0970000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[5823]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T10:24:37.5300000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5824]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-31T10:24:32.4820000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[5825]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-31T10:24:32.0640000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[5826]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:31.2020000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5827]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:29.3520000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve was reorganized with a starting size of 24670208 bytes and an ending size of 16539648 bytes. 

Event[5828]
  Log Name: System
  Source: TPM
  Date: 2024-01-31T10:24:28.8990000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[5829]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-31T10:24:28.8870000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[5830]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-01-31T10:24:28.4530000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[5831]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.3980000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x13D4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[5832]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.3980000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000020000001. Status 0x0. Process Id 0x13D4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[5833]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-31T10:24:28.3810000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[5834]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:28.3640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\WindowsApps\Microsoft.GamingServices_17.85.5002.0_x64__8wekyb3d8bbwe\Cache\614c1dd4fa20d05a_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5835]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-31T10:24:28.2810000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[5836]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5837]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5838]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5839]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5840]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5841]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5842]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5843]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5844]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5845]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5846]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5847]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5848]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5849]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5850]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5851]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5852]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-31T10:24:28.1620000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[5853]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-31T10:24:24.5810000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[5854]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T10:24:24.5730000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[5855]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T10:24:24.5730000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[5856]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-31T10:24:24.5730000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[5857]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:24.4340000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5858]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:24.4290000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5859]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:24.4190000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5860]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:24.4190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[5861]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:24.4190000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5862]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:24.4100000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5863]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:24.4000000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\bbimigrate\BBI was cleared updating 1 keys and creating 1 modified pages. 

Event[5864]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:24.3720000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5865]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:24.3660000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5866]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:24.2900000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 432 keys and creating 89 modified pages. 

Event[5867]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:24.2890000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 204 keys and creating 19 modified pages. 

Event[5868]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:24.0590000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 193 keys and creating 23 modified pages. 

Event[5869]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T10:24:23.8940000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[5870]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T10:24:23.8940000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[5871]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-31T10:24:23.8700000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[5872]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.8330000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[5873]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.8330000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[5874]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.7800000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[5875]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.7590000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[5876]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.7080000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[5877]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.6970000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[5878]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.6860000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[5879]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.6600000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[5880]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.6070000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[5881]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.5850000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[5882]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-31T10:24:23.5150000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[5883]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-31T10:24:23.4120000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[5884]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-31T10:24:23.4120000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[5885]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-31T10:24:21.0820000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[5886]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:20.6370000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[5887]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:20.5570000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 169799680 bytes and an ending size of 169537536 bytes. 

Event[5888]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:18.5280000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 691 keys and creating 69 modified pages. 

Event[5889]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:18.5200000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 76 keys and creating 4 modified pages. 

Event[5890]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:18.5070000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 67 keys and creating 8 modified pages. 

Event[5891]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T10:24:18.4650000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[5892]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T10:24:18.1170000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[5893]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T10:24:16.9830000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[5894]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T10:24:16.3810000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[5895]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-31T10:24:15.7510000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[5896]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T10:24:15.5670000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[5897]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-31T10:24:14.3320000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[5898]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-31T10:24:13.2850000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[5899]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T10:24:13.1110000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5900]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T10:24:13.1110000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5901]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T10:24:13.0490000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5902]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T10:24:13.0490000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5903]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T10:24:13.0330000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[5904]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-31T10:24:13.0170000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[5905]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-31T10:24:13.0170000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[5906]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-31T10:24:12.9550000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[5907]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5908]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9590000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5909]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9580000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5910]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9570000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5911]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5912]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5913]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5914]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9480000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[5915]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5916]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5917]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5918]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5919]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9330000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5920]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9320000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5921]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5922]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5923]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5924]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9230000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5925]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5926]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5927]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5928]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9170000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5929]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9170000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[5930]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-31T10:24:12.9040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[5931]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T10:24:12.3400000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[5932]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T10:24:12.3270000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[5933]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-31T10:24:12.3230000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[5934]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:12.2550000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5935]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:12.0520000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5936]
  Log Name: System
  Source: volmgr
  Date: 2024-01-31T10:24:11.9950000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[5937]
  Log Name: System
  Source: volmgr
  Date: 2024-01-31T10:24:11.9630000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[5938]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-31T10:24:11.8850000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[5939]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:05.8180000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5940]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:05.8170000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5941]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-31T10:24:05.8160000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[5942]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T10:24:24.8450000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 21 seconds. 

Event[5943]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T10:24:24.8440000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[5944]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T10:24:24.8440000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[5945]
  Log Name: System
  Source: EventLog
  Date: 2024-01-31T10:24:24.8440000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 22:47:14 on ?30/?01/?2024 was unexpected. 

Event[5946]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-31T10:24:04.3860000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[5947]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:04.3370000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[5948]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T10:24:04.3320000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[5949]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T10:24:04.3320000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[5950]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T10:24:04.3320000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[5951]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T10:24:04.3320000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?31T10:24:02.000000000Z. 

Event[5952]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T10:24:04.3310000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[5953]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T10:24:04.3310000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[5954]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T10:24:04.3310000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[5955]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-31T10:24:04.3310000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[5956]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-31T10:24:04.3310000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?31T10:24:03.500000000Z. 

Event[5957]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T22:58:18.4420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[5958]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T22:55:32.2170000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\a741c31b50079fb3_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5959]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T22:55:32.2160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5960]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T22:55:32.2150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[5961]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-30T22:54:23.7060000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5962]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-30T22:52:12.5740000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5963]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T21:57:10.1820000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.FlightSimulator_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[5964]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T20:55:28.9160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 64 keys and creating 9 modified pages. 

Event[5965]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T20:41:07.9420000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 7 keys and creating 2 modified pages. 

Event[5966]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-30T20:15:05.1090000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl13dce05f
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{27EB39C8-231B-4621-90E7-300A1276D55E}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[5967]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-30T20:15:05.0740000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2952.0) - Current Channel (Broad) 

Event[5968]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-30T20:15:00.4480000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2952.0) - Current Channel (Broad) 

Event[5969]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-30T20:15:00.4480000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[5970]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:03:26.2470000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5971]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-30T20:03:26.2230000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[5972]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:22.3540000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5973]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:22.3420000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000009). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5974]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:22.2380000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000009). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5975]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:22.2300000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5976]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:06.0830000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5977]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:06.0630000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5978]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:05.9620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5979]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:05.9480000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000152000000B). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5980]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:01.9100000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000152000000B). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5981]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:01.8990000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000008). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5982]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:01.7970000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000008). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5983]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:01:01.7870000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5984]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:00:57.6990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5985]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:00:57.6830000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5986]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:00:57.5640000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5987]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:00:57.5540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000162000000A). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5988]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:00:49.5900000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000162000000A). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5989]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:00:49.5730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000007). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5990]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:00:49.4720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000007). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5991]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T20:00:49.4620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000142000000B). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5992]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-30T19:59:51.9970000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[5993]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-30T19:59:00.2750000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 50 to 52.

Reason InputHid 

BootId: 18 

Event[5994]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T19:58:34.7870000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000142000000B). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5995]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T19:58:34.7680000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000A20000007). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5996]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-30T19:58:29.9960000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000007). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[5997]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-30T19:58:25.7610000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[5998]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-30T19:55:47.3390000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 49 to 50.

Reason SessionUnlock 

BootId: 18 

Event[5999]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-30T19:55:24.2960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[6000]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-30T19:54:36.3200000Z
  Event ID: 33
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit. 

Event[6001]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-30T19:54:32.7590000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6002]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:54:24.3300000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1051 keys and creating 62 modified pages. 

Event[6003]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:53:20.5750000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?30T19:53:20.489079300Z from ?2024?-?01?-?30T19:53:20.487867700Z.
Time Delta: 1 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 25168).

RTC time: ?2024?-?01?-?30T19:53:20.489079300Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6004]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:53:20.4890000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[6005]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:53:20.4880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?30T19:53:20.394078900Z from ?2024?-?01?-?30T19:53:20.393350200Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 25168).

RTC time: ?2024?-?01?-?30T19:53:20.394078900Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6006]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:53:20.3940000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[6007]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-30T19:53:20.3940000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[6008]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:53:20.3930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?30T19:53:20.307613300Z from ?2024?-?01?-?30T19:53:23.445696900Z.
Time Delta: -3138 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 25168).

RTC time: ?2024?-?01?-?30T19:53:20.307613300Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6009]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:53:20.3070000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[6010]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:53:22.5730000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftTeams_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[6011]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:53:22.3170000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftTeams_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 35 keys and creating 3 modified pages. 

Event[6012]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-30T19:53:17.6930000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6013]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 37828. 

Event[6014]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 37828. 

Event[6015]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[6016]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[6017]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[6018]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[6019]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[6020]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[6021]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[6022]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[6023]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[6024]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{fb070083-beb4-11ee-8953-086ac578260b}" 

Event[6025]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[6026]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[6027]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[6028]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca5-31dd-9bac-204183070f1e} 

Event[6029]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca5-31dd-9bac-204183070f1e} 

Event[6030]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[6031]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[6032]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca5-31dd-9ba 

Event[6033]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 8; device name: \Volume{234e3a45-fca5-31dd-9bac-204183070f1e}. 

Event[6034]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[6035]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca5-31dd-9bac-204183070f1e}" created 

Event[6036]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca5-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[6037]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[6038]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca5-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[6039]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca5-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[6040]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[6041]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 8l 

Event[6042]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[6043]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[6044]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-30T19:53:08.0840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[6045]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-30T19:53:07.4580000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[6046]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-30T19:53:05.4230000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6047]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-30T19:52:31.2590000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6048]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:52:28.2040000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 28 keys and creating 3 modified pages. 

Event[6049]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:52:28.2010000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 27 keys and creating 3 modified pages. 

Event[6050]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-30T19:52:27.5580000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[6051]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-30T19:52:27.1970000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6052]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-30T19:52:27.1950000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6053]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:52:26.8930000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 16376 keys and creating 1589 modified pages. 

Event[6054]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-30T19:52:26.8520000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?29T22:22:32.087643800Z
Wake Time: ?2024?-?01?-?30T19:52:25.824659200Z

Wake Source: Unknown 

Event[6055]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:52:26.8450000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\ntuser.dat was cleared updating 9954 keys and creating 1281 modified pages. 

Event[6056]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-30T19:52:26.4590000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[6057]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-30T19:52:25.9520000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 47 to 49.

Reason Unknown 

BootId: 18 

Event[6058]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-30T19:52:25.7790000Z
  Event ID: 134
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) 

Event[6059]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-30T19:52:25.7690000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 46 to 47.

Reason SxTransition 

BootId: 18 

Event[6060]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-30T19:52:25.7690000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[6061]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-30T19:52:25.7690000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[6062]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-30T19:52:25.7690000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[6063]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-30T19:52:25.4070000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[6064]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-30T19:52:25.1010000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[6065]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-30T19:52:24.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?30T19:52:24.500000000Z from ?2024?-?01?-?29T22:22:41.611189600Z.
Time Delta: 77382888 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?30T19:52:24.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6066]
  Log Name: System
  Source: EventLog
  Date: 2024-01-30T19:52:24.8410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 667329 seconds. 

Event[6067]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-29T22:22:41.6110000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[6068]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T22:22:37.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?29T22:22:37.500000000Z from ?2024?-?01?-?29T22:22:35.711507900Z.
Time Delta: 1788 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?29T22:22:37.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6069]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-29T22:22:33.8150000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[6070]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-29T22:22:32.0910000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 45 to 46.

Reason InputAccelerometer 

BootId: 18 

Event[6071]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-29T22:22:32.0870000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[6072]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-29T22:22:31.5690000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[6073]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:30.0150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6074]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:30.0010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6075]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.9840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6076]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.9680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6077]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.9520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6078]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.9360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6079]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.9280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6080]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.9110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6081]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.8950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6082]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.8810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6083]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.8730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6084]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.8660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6085]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.8530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6086]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.8380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6087]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.8240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6088]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.8090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6089]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.7980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6090]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.7900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6091]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.7750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6092]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.7610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6093]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.7470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6094]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.7340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6095]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.7240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6096]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.7160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6097]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.7070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6098]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.6920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6099]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.6780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6100]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.6610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6101]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.6450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6102]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.6300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6103]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.6160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6104]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.6010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6105]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.5870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6106]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.5790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6107]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.5670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6108]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.5510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6109]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.5360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6110]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.5220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6111]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.5070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6112]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.4900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6113]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.4740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6114]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.4600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6115]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.4450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6116]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.4310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6117]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.4170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6118]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.4050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6119]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.3880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6120]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.3730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6121]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.3580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6122]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.3440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6123]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.3300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6124]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.3210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6125]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.3070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6126]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.2930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6127]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.2850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6128]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.2780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6129]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.2700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6130]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.2550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6131]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.2380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6132]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.2230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6133]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.2130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6134]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.1950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6135]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.1780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6136]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.1640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6137]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.1500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6138]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.1350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6139]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.1210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6140]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.1060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6141]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.0920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6142]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.0770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6143]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.0630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6144]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.0480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6145]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.0340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6146]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.0190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6147]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:29.0080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6148]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.9930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6149]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.9790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6150]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.9640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6151]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.9500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6152]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.9350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6153]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.9200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6154]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.9050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6155]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.8900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6156]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.8750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6157]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.8610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6158]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.8470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6159]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.8330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6160]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.8180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6161]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.8040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6162]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.7890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6163]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.7750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6164]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.7600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6165]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.7450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6166]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.7300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6167]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.7150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6168]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.7010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6169]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.6860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6170]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.6720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6171]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.6570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6172]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.6420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6173]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.6280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6174]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.6140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6175]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.6000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6176]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.5850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6177]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.5700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6178]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.5540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6179]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.5390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6180]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.5240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6181]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.5100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6182]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.4950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6183]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.4790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6184]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T22:22:28.4640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6185]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[6186]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[6187]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[6188]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[6189]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca4-31dd-9bac-204183070f1e} 

Event[6190]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca4-31dd-9bac-204183070f1e} 

Event[6191]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[6192]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[6193]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[6194]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[6195]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca4-31dd-9bac-204183070f1e}" 

Event[6196]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[6197]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[6198]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[6199]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{0c851be0-bd6c-11ee-8953-086ac578260b}" 

Event[6200]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[6201]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca4-31dd-9bac-2041830 

Event[6202]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[6203]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T22:22:24.6020000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[6204]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-29T22:15:51.1670000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslcf78633f
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2641B544-26B3-44FF-BF24-42F27EE1728E}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[6205]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T22:15:51.1310000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2905.0) - Current Channel (Broad) 

Event[6206]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T22:15:46.5610000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2905.0) - Current Channel (Broad) 

Event[6207]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T22:15:46.5610000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6208]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-29T22:07:08.8910000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 43 to 45.

Reason InputAccelerometer 

BootId: 18 

Event[6209]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-29T21:42:05.4140000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 42 to 43.

Reason SessionUnlock 

BootId: 18 

Event[6210]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-29T18:09:32.9510000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6211]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-29T18:07:28.7130000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6212]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:47.4160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.PowerToys.ImageResizerContextMenu_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\abc688e25d840df4_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6213]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:47.4150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.ImageResizerContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6214]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:47.4140000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.ImageResizerContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6215]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:47.3340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6216]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:47.3330000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6217]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:18.2680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\bfc27b3bb6d0d16c_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6218]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:18.2670000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6219]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:18.2660000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6220]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:18.2290000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\24716aef7915c612_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6221]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:18.1940000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6222]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:18.1930000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 6 keys and creating 1 modified pages. 

Event[6223]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:18.1560000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.OneDriveSync_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\b10ff7f29dc102c2_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6224]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T17:41:17.9200000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\WinRAR.ShellExtension_s4jet1zx4n14a\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\404089864fa344cb_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6225]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T17:08:18.2470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6226]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T17:08:18.2240000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6227]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T15:59:21.4010000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. 

Event[6228]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T15:59:21.1830000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop 

Event[6229]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T15:59:20.7240000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5319275A.WhatsAppDesktop_2.2401.5.0_x64__cv1g1gvanyjgm\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[6230]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T15:59:19.3350000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NFTCH6J7FHV-Microsoft.PowerAutomateDesktop 

Event[6231]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T15:59:19.0490000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6232]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T15:59:18.9510000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NFTCH6J7FHV-Microsoft.PowerAutomateDesktop 

Event[6233]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T15:59:17.4670000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6234]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T15:59:17.4670000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6235]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-29T15:53:33.9410000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6236]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-29T15:36:29.9410000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6237]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-29T15:19:25.9410000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6238]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-29T15:02:21.9400000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6239]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T14:45:17.5600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Windows\System32\config\components was cleared updating 75998 keys and creating 9310 modified pages. 

Event[6240]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-29T14:45:01.9460000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[6241]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-29T14:45:01.9330000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6242]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T14:27:46.6860000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000009). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6243]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-29T14:27:46.6350000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6244]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T14:25:39.5250000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000009). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6245]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T14:25:39.5130000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6246]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T14:25:34.6550000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6247]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-29T14:25:30.5060000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6248]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-29T13:49:09.6310000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[6249]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T12:16:49.0040000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 4 keys and creating 1 modified pages. 

Event[6250]
  Log Name: System
  Source: EventLog
  Date: 2024-01-29T12:00:00.7710000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 552586 seconds. 

Event[6251]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-29T10:38:28.1210000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 206499 seconds since the last report. 

Event[6252]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-29T10:38:28.1210000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 206499 seconds since the last report. 

Event[6253]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-29T10:38:28.1210000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 206499 seconds since the last report. 

Event[6254]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-29T10:38:28.1210000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 206499 seconds since the last report. 

Event[6255]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-29T10:38:28.1060000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 206499 seconds since the last report. 

Event[6256]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-29T10:38:28.1060000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 206499 seconds since the last report. 

Event[6257]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-29T10:38:28.1060000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 206499 seconds since the last report. 

Event[6258]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-29T10:38:28.1060000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 206499 seconds since the last report. 

Event[6259]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-29T10:05:06.0370000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl6973cd4a
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1E48710F-7631-49D0-A8E0-B4FD4DBACE2F}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[6260]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T10:05:06.0050000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2882.0) - Current Channel (Broad) 

Event[6261]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T10:05:00.9270000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2882.0) - Current Channel (Broad) 

Event[6262]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-29T10:05:00.9270000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6263]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T09:32:50.7770000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000220000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6264]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-29T09:32:50.7410000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6265]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T09:27:32.7490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[6266]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T09:25:34.8390000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000220000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6267]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T09:25:34.8250000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000008). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6268]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T09:25:34.7160000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000008). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6269]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T09:25:34.6950000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFF00000C20000021). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6270]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T09:25:30.6980000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFF00000C20000021). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6271]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T09:25:30.6840000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000220000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6272]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-29T09:25:30.5740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000220000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6273]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T09:24:38.9960000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6274]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T09:23:44.7720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?29T09:23:44.689201000Z from ?2024?-?01?-?29T09:23:44.689177200Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 51596).

RTC time: ?2024?-?01?-?29T09:23:44.689201000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6275]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T09:23:44.6890000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[6276]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T09:23:44.6880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?29T09:23:44.605166700Z from ?2024?-?01?-?29T09:23:44.604452700Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 51596).

RTC time: ?2024?-?01?-?29T09:23:44.605166700Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6277]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T09:23:44.6050000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[6278]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-29T09:23:44.6050000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[6279]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T09:23:44.6040000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?29T09:23:44.519933000Z from ?2024?-?01?-?29T09:23:46.698671100Z.
Time Delta: -2178 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 51596).

RTC time: ?2024?-?01?-?29T09:23:44.519933000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6280]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T09:23:44.5200000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[6281]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T09:23:39.2950000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6282]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:32.0470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[6283]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-29T09:23:30.7090000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[6284]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 16804. 

Event[6285]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 16804. 

Event[6286]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[6287]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[6288]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[6289]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[6290]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[6291]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[6292]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[6293]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[6294]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{0c851be0-bd6c-11ee-8953-086ac578260b}" 

Event[6295]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[6296]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[6297]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[6298]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca4-31dd-9bac-204183070f1e} 

Event[6299]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca4-31dd-9bac-204183070f1e} 

Event[6300]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[6301]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[6302]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca4-31dd-9ba 

Event[6303]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 7; device name: \Volume{234e3a45-fca4-31dd-9bac-204183070f1e}. 

Event[6304]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[6305]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca4-31dd-9bac-204183070f1e}" created 

Event[6306]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca4-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[6307]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[6308]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca4-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[6309]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca4-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[6310]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[6311]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 7l 

Event[6312]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[6313]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[6314]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-29T09:23:29.5830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[6315]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T09:23:26.9890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6316]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T09:22:52.1010000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6317]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-29T09:22:52.0970000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6318]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-29T09:22:51.5230000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[6319]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-29T09:22:50.9220000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?28T23:05:30.127261300Z
Wake Time: ?2024?-?01?-?29T09:22:49.841770700Z

Wake Source: Unknown 

Event[6320]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-29T09:22:50.7090000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[6321]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-29T09:22:50.1360000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 40 to 42.

Reason Unknown 

BootId: 18 

Event[6322]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-29T09:22:49.7850000Z
  Event ID: 134
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) 

Event[6323]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-29T09:22:49.7800000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 39 to 40.

Reason SxTransition 

BootId: 18 

Event[6324]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-29T09:22:49.7790000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[6325]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-29T09:22:49.7790000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[6326]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-29T09:22:49.7790000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[6327]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-29T09:22:49.5800000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[6328]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-29T09:22:49.0890000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[6329]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-29T09:22:48.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?29T09:22:48.500000000Z from ?2024?-?01?-?28T23:05:39.359394900Z.
Time Delta: 37029140 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?29T09:22:48.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6330]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T23:05:39.3590000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[6331]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T23:05:36.6200000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000112000000A). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6332]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T23:05:34.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?28T23:05:34.500000000Z from ?2024?-?01?-?28T23:05:32.891319600Z.
Time Delta: 1608 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?28T23:05:34.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6333]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T23:05:31.8570000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[6334]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T23:05:30.1290000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 38 to 39.

Reason InputAccelerometer 

BootId: 18 

Event[6335]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T23:05:30.1270000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[6336]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-28T23:05:29.7700000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[6337]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:29.0400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6338]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:29.0320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6339]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:29.0220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6340]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:29.0130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6341]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:29.0030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6342]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6343]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6344]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6345]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6346]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6347]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6348]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6349]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6350]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6351]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6352]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6353]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.9060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6354]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6355]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6356]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6357]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6358]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6359]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6360]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6361]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6362]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6363]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6364]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6365]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6366]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.8030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6367]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6368]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6369]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6370]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6371]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6372]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6373]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6374]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6375]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6376]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6377]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6378]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.7050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6379]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6380]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6381]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6382]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6383]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6384]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6385]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6386]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6387]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6388]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6389]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6390]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6391]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.6020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6392]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6393]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6394]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6395]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6396]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6397]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6398]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6399]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6400]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6401]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6402]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6403]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.5010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6404]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6405]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6406]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6407]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6408]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6409]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6410]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6411]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6412]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6413]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6414]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6415]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.4050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6416]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6417]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6418]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6419]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6420]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6421]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6422]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6423]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6424]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6425]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.3060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6426]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.2950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6427]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.2820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6428]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.2720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6429]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.2600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6430]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.2500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6431]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.2410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6432]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.2290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6433]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.2070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6434]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6435]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6436]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6437]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6438]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6439]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6440]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6441]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6442]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6443]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6444]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.1080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6445]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.0990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6446]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.0900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6447]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.0810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6448]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:28.0720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6449]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.7940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6450]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.7800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6451]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.7620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6452]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.7460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6453]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.7290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6454]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.7120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6455]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.7050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6456]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.6880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6457]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.6710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6458]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.6560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6459]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.6480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6460]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.6410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6461]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.6330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6462]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.6180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6463]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.6030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6464]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.5870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6465]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.5790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6466]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.5720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6467]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.5570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6468]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.5430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6469]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.5280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6470]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.5150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6471]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.5070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6472]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.5010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6473]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.4920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6474]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.4770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6475]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.4620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6476]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.4450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6477]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.4290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6478]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.4140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6479]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.3980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6480]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.3840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6481]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.3690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6482]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.3620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6483]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.3530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6484]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.3390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6485]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.3240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6486]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.3080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6487]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.2930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6488]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.2740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6489]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.2560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6490]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.2400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6491]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.2240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6492]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.2070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6493]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.1930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6494]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.1840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6495]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.1670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6496]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.1510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6497]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.1360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6498]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.1210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6499]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.1070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6500]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.0990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6501]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.0840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6502]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.0690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6503]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.0630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6504]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.0560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6505]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.0480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6506]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.0330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6507]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.0180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6508]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:27.0030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6509]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.9930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6510]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.9750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6511]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.9570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6512]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.9430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6513]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.9280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6514]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.9120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6515]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.8970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6516]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.8820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6517]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.8660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6518]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.8520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6519]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.8370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6520]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.8220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6521]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.8070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6522]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.7920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6523]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.7840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6524]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.7690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6525]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.7530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6526]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.7380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6527]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.7230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6528]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.7080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6529]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.6930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6530]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.6780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6531]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.6620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6532]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.6470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6533]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.6320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6534]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.6180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6535]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.6040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6536]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.5890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6537]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.5740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6538]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.5580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6539]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.5430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6540]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.5280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6541]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.5120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6542]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.4970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6543]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.4820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6544]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.4660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6545]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.4520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6546]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.4370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6547]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.4220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6548]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.4060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6549]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.3910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6550]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.3760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6551]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.3610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6552]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.3450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6553]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.3300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6554]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.3150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6555]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.2990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6556]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.2840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6557]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.2680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6558]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.2530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6559]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.2360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6560]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:26.2200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[6561]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:24.7070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {2DE3095A-B49E-418F-B5C1-69D2CCF62A8F} did not register with DCOM within the required timeout. 

Event[6562]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[6563]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[6564]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[6565]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[6566]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca7-31dd-9bac-204183070f1e} 

Event[6567]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca7-31dd-9bac-204183070f1e} 

Event[6568]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[6569]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[6570]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[6571]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[6572]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca7-31dd-9bac-204183070f1e}" 

Event[6573]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[6574]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[6575]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[6576]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{0c850271-bd6c-11ee-8953-086ac578260b}" 

Event[6577]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[6578]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca7-31dd-9bac-2041830 

Event[6579]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[6580]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T23:05:22.1600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[6581]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T23:05:20.8150000Z
  Event ID: 10005
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
DCOM got error "1053" attempting to start the service BcastDVRUserService_378c3d99 with arguments "Unavailable" in order to run the server:
Windows.Media.Capture.Internal.AppCaptureShell 

Event[6582]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T23:05:20.8150000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The GameDVR and Broadcast User Service_378c3d99 service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion. 

Event[6583]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T23:05:20.8140000Z
  Event ID: 7009
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
A timeout was reached (30000 milliseconds) while waiting for the GameDVR and Broadcast User Service_378c3d99 service to connect. 

Event[6584]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T23:05:17.3300000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000112000000A). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6585]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T23:05:17.3220000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000142000000A). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6586]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T23:05:17.2230000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000142000000A). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6587]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T22:33:06.1200000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6588]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-28T22:01:37.7180000Z
  Event ID: 4
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service stopped. 

Event[6589]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-28T21:01:51.9950000Z
  Event ID: 33
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit. 

Event[6590]
  Log Name: System
  Source: disk
  Date: 2024-01-28T20:38:51.4340000Z
  Event ID: 153
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The IO operation at logical block address 0x8000 for Disk 5 (PDO name: \Device\000004ad) was retried. 

Event[6591]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-28T20:30:25.3140000Z
  Event ID: 33
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit. 

Event[6592]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-28T20:27:46.1240000Z
  Event ID: 33
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit. 

Event[6593]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T20:26:23.8770000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6594]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T20:25:14.7250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6595]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T20:25:14.6990000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6596]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T20:24:31.7000000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 11 keys and creating 1 modified pages. 

Event[6597]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-28T20:17:49.5330000Z
  Event ID: 3
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
Filter Manager failed to attach to volume '\Device\Harddisk5\DR9'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C. 

Event[6598]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T19:19:03.0840000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6599]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-28T19:17:26.6980000Z
  Event ID: 3
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Filter Manager failed to attach to volume '\Device\Harddisk5\DR6'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C. 

Event[6600]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-28T19:17:26.6980000Z
  Event ID: 3
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Filter Manager failed to attach to volume '\Device\Harddisk5\DR6'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C. 

Event[6601]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-28T19:17:09.1590000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FsDepends' (10.0, ?2056?-?03?-?07T17:54:55.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[6602]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T19:17:07.1320000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{4E06784A-4121-4B96-9F77-A776A28A2DD5} was cleared updating 14861 keys and creating 2497 modified pages. 

Event[6603]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T19:17:04.5190000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy8\WINDOWS\System32\config\DRIVERS (TM: {0c8516e1-bd6c-11ee-8953-086ac578260b}, RM: {0c8516e0-bd6c-11ee-8953-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[6604]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T19:17:04.4830000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy8\WINDOWS\System32\config\SYSTEM (TM: {0c8516de-bd6c-11ee-8953-086ac578260b}, RM: {0c8516dd-bd6c-11ee-8953-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[6605]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T19:16:58.9340000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6606]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-28T19:16:37.7270000Z
  Event ID: 3
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service started. 

Event[6607]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-28T19:00:18.5210000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy8) is healthy.  No action is needed. 

Event[6608]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-28T19:00:18.3480000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy7) is healthy.  No action is needed. 

Event[6609]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T18:09:32.5960000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6610]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T18:07:28.4260000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6611]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T17:35:30.3150000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000A20000006). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6612]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T17:35:30.2800000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6613]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T17:33:15.1550000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000006). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6614]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T17:33:15.1480000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000006). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6615]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T17:33:10.3330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000006). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6616]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T17:33:06.1420000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6617]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T16:15:44.0160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\config\DRIVERS was cleared updating 26690 keys and creating 1216 modified pages. 

Event[6618]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-28T15:41:12.8860000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6619]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-28T15:24:08.8860000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6620]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-28T15:07:04.8860000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6621]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-28T14:50:00.8880000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6622]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T14:33:45.3820000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{F52AC78F-D035-4BEB-8E6D-6E4E3F54C572} was cleared updating 14861 keys and creating 2497 modified pages. 

Event[6623]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T14:33:42.3640000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy6\WINDOWS\System32\config\DRIVERS (TM: {0c851300-bd6c-11ee-8953-086ac578260b}, RM: {0c8512ff-bd6c-11ee-8953-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[6624]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T14:33:42.3400000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy6\WINDOWS\System32\config\SYSTEM (TM: {0c8512fd-bd6c-11ee-8953-086ac578260b}, RM: {0c8512fc-bd6c-11ee-8953-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[6625]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-28T14:32:40.9080000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[6626]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-28T14:32:40.8830000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6627]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T14:30:46.3530000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6628]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T14:28:39.1050000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[6629]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T14:28:37.1780000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6630]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T12:35:34.2940000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000A20000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6631]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T12:35:34.2860000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6632]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T12:33:15.1460000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6633]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T12:33:15.1310000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6634]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-28T12:33:10.3240000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6635]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T12:33:06.1260000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6636]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T12:32:11.3090000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6637]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T12:31:39.5090000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 36 to 38.

Reason InputAccelerometer 

BootId: 18 

Event[6638]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T12:28:27.6370000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 35 to 36.

Reason SessionUnlock 

BootId: 18 

Event[6639]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T12:28:04.1810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[6640]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T12:27:34.9050000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[6641]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T12:26:41.3490000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6642]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 34560. 

Event[6643]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 34560. 

Event[6644]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[6645]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[6646]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[6647]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[6648]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[6649]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[6650]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[6651]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[6652]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{0c850271-bd6c-11ee-8953-086ac578260b}" 

Event[6653]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[6654]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[6655]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[6656]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca7-31dd-9bac-204183070f1e} 

Event[6657]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca7-31dd-9bac-204183070f1e} 

Event[6658]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[6659]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[6660]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca7-31dd-9ba 

Event[6661]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 6; device name: \Volume{234e3a45-fca7-31dd-9bac-204183070f1e}. 

Event[6662]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[6663]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca7-31dd-9bac-204183070f1e}" created 

Event[6664]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca7-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[6665]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[6666]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca7-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[6667]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca7-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[6668]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[6669]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 6l 

Event[6670]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[6671]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[6672]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T12:26:30.5940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[6673]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T12:26:29.0710000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6674]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T12:26:24.5810000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl89241792
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{EE999E1A-DA45-4EF2-9790-3F3B587EB3B1}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[6675]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-28T12:26:24.5750000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2836.0) - Current Channel (Broad) 

Event[6676]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-28T12:26:11.5550000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2836.0) - Current Channel (Broad) 

Event[6677]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-28T12:26:11.5550000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6678]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T12:26:00.1060000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 9 keys and creating 1 modified pages. 

Event[6679]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T12:26:00.1010000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 17 keys and creating 2 modified pages. 

Event[6680]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T12:25:58.6230000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 71 keys and creating 10 modified pages. 

Event[6681]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T12:25:52.8030000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[6682]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T12:25:51.3000000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \Device\HarddiskVolume7\EFI\Microsoft\Boot\BCD was cleared updating 87 keys and creating 11 modified pages. 

Event[6683]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T12:25:51.2980000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 10 keys and creating 1 modified pages. 

Event[6684]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T12:25:51.0580000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 17 keys and creating 6 modified pages. 

Event[6685]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T12:25:49.5810000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6686]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-28T12:25:49.5790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6687]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-28T12:25:48.6040000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[6688]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-28T12:25:47.9720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?28T00:07:54.243419500Z
Wake Time: ?2024?-?01?-?28T12:25:46.840244700Z

Wake Source: Unknown 

Event[6689]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-28T12:25:47.6470000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[6690]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T12:25:47.0010000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 33 to 35.

Reason Unknown 

BootId: 18 

Event[6691]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T12:25:46.7820000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 32 to 33.

Reason SxTransition 

BootId: 18 

Event[6692]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-28T12:25:46.7810000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[6693]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-28T12:25:46.7810000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[6694]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-28T12:25:46.7810000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[6695]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-28T12:25:46.4080000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[6696]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-28T12:25:46.0510000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[6697]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-28T12:25:45.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?28T12:25:45.500000000Z from ?2024?-?01?-?28T00:08:01.481263000Z.
Time Delta: 44264018 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?28T12:25:45.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6698]
  Log Name: System
  Source: EventLog
  Date: 2024-01-28T12:25:45.8460000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 467728 seconds. 

Event[6699]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T00:08:01.4810000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[6700]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T00:07:55.9800000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[6701]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T00:07:54.2470000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 31 to 32.

Reason InputAccelerometer 

BootId: 18 

Event[6702]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-28T00:07:54.2440000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[6703]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-28T00:07:53.7920000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[6704]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[6705]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[6706]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[6707]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[6708]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[6709]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[6710]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[6711]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[6712]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[6713]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[6714]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}" 

Event[6715]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[6716]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[6717]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[6718]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{4dbdac85-b655-11ee-8949-086ac578260b}" 

Event[6719]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[6720]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca6-31dd-9bac-2041830 

Event[6721]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[6722]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[6723]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-28T00:07:46.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[6724]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T00:04:17.1760000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6725]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-28T00:02:06.3840000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6726]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T23:58:07.8910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?27T23:58:07.808996900Z from ?2024?-?01?-?27T23:58:07.808737400Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 25712).

RTC time: ?2024?-?01?-?27T23:58:07.808996900Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6727]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T23:58:07.8090000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[6728]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-27T23:58:07.8080000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[6729]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-27T23:57:51.8100000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[6730]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T23:33:02.9040000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6731]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T23:30:58.5130000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6732]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:47:49.3510000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000007). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6733]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T22:47:49.3420000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6734]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:45:19.8670000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000007). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6735]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:45:19.8610000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000006). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6736]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:45:19.7620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000006). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6737]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T22:45:05.2520000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6738]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:44:36.9690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6739]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T22:44:36.9620000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6740]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:42:31.8780000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6741]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:42:31.8710000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000006). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6742]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:42:31.7720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000006). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6743]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:42:31.7650000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000009). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6744]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:41:26.6490000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000009). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6745]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:41:26.6430000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6746]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T22:41:26.5210000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6747]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T22:40:08.8220000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6748]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T21:11:10.4410000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 7 keys and creating 2 modified pages. 

Event[6749]
  Log Name: System
  Source: Microsoft-Windows-DNS-Client
  Date: 2024-01-27T20:18:15.8230000Z
  Event ID: 1014
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-20
  User Name: NT AUTHORITY\NETWORK SERVICE
  Computer: PC-Main
  Description: 
Name resolution for the name dmd.metaservices.microsoft.com timed out after none of the configured DNS servers responded. Client PID 52416. 

Event[6750]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T20:08:01.4130000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. 

Event[6751]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T20:08:01.2290000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop 

Event[6752]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T20:07:56.4240000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6753]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T20:07:49.3370000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6754]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T20:07:44.5260000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6755]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T20:07:44.5260000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6756]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-27T16:00:15.7980000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6757]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-27T15:43:11.7970000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6758]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-27T15:26:07.7930000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6759]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-27T15:09:03.7950000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6760]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T14:52:16.3310000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. 

Event[6761]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-27T14:52:16.1380000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy6) is healthy.  No action is needed. 

Event[6762]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T14:52:16.0380000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop 

Event[6763]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T14:52:04.5350000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6764]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-27T14:51:43.8050000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[6765]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-27T14:51:43.7900000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6766]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T14:47:39.3940000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 12 keys and creating 2 modified pages. 

Event[6767]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T14:42:38.7080000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\NearbyShareLauncher_xyz345f542f50\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\8549c8038f46d4f3_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6768]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T14:42:38.7060000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NearbyShareLauncher_xyz345f542f50\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6769]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T14:42:38.7050000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NearbyShareLauncher_xyz345f542f50\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6770]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T14:37:50.3940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[6771]
  Log Name: System
  Source: Microsoft-Windows-DNS-Client
  Date: 2024-01-27T14:31:47.5410000Z
  Event ID: 1014
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-20
  User Name: NT AUTHORITY\NETWORK SERVICE
  Computer: PC-Main
  Description: 
Name resolution for the name rr3---sn-u5a3u5a3-ajty.googlevideo.com timed out after none of the configured DNS servers responded. Client PID 21080. 

Event[6772]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-27T14:20:23.3030000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[6773]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T13:09:41.2640000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6774]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-27T13:09:29.6180000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service NVHDA for Device Instance ID HDAUDIO\FUNC_01&VEN_10DE&DEV_009A&SUBSYS_14623896&REV_1001\5&3B380550&0&0001 with the following status: 0. 

Event[6775]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T13:09:24.9840000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6776]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-27T13:09:23.2770000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service NVDisplay.ContainerLocalSystem for Device Instance ID PCI\VEN_10DE&DEV_2208&SUBSYS_38961462&REV_A1\4&22F77229&0&0008 with the following status: 0. 

Event[6777]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T13:09:22.7080000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The NVIDIA LocalSystem Container service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 6000 milliseconds: Restart the service. 

Event[6778]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T13:09:22.7080000Z
  Event ID: 7023
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The NVIDIA LocalSystem Container service terminated with the following error: 
A generic command executable returned a result that indicates failure. 

Event[6779]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-27T13:09:22.6900000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service nvlddmkm for Device Instance ID PCI\VEN_10DE&DEV_2208&SUBSYS_38961462&REV_A1\4&22F77229&0&0008 with the following status: 0. 

Event[6780]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T12:54:37.9800000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl3a36fa7e
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FABC30A7-BDDB-4001-83E8-C48A1D818635}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[6781]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T12:54:37.9460000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2784.0) - Current Channel (Broad) 

Event[6782]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T12:54:33.3790000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2784.0) - Current Channel (Broad) 

Event[6783]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T12:54:23.7110000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6784]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T12:43:05.3060000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000152000000A). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6785]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T12:43:05.2070000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6786]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T12:40:57.3140000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000152000000A). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6787]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T12:40:57.3080000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6788]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T12:40:57.2130000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6789]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T12:40:57.2070000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000009). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6790]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T12:40:17.8450000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000009). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6791]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T12:40:17.8320000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000009). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6792]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T12:40:12.9700000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000009). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6793]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T12:40:08.8180000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6794]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T12:39:12.2090000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6795]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T12:38:39.8510000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 29 to 31.

Reason InputAccelerometer 

BootId: 18 

Event[6796]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T12:38:18.9960000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 28 to 29.

Reason SessionUnlock 

BootId: 18 

Event[6797]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T12:37:15.9950000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 26 to 28.

Reason Unknown 

BootId: 18 

Event[6798]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T12:35:34.0300000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 25 to 26.

Reason SessionUnlock 

BootId: 18 

Event[6799]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T12:35:30.1730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[6800]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T12:35:08.0930000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6801]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T12:34:11.4200000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6802]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T12:33:52.8040000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6803]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 37240. 

Event[6804]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 37240. 

Event[6805]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[6806]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[6807]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[6808]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[6809]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[6810]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[6811]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[6812]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[6813]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[6814]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{4dbdac85-b655-11ee-8949-086ac578260b}" 

Event[6815]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[6816]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[6817]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[6818]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[6819]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[6820]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[6821]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[6822]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca6-31dd-9ba 

Event[6823]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 5; device name: \Volume{234e3a45-fca6-31dd-9bac-204183070f1e}. 

Event[6824]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[6825]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca6-31dd-9bac-204183070f1e}" created 

Event[6826]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[6827]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[6828]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[6829]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[6830]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[6831]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 5l 

Event[6832]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[6833]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[6834]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T12:33:39.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[6835]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T12:33:36.6480000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6836]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T12:33:03.9180000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6837]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-27T12:32:55.7960000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[6838]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T12:32:55.3620000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6839]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T12:32:55.3600000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[6840]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-27T12:32:54.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?27T01:45:58.018103700Z
Wake Time: ?2024?-?01?-?27T12:32:53.738470600Z

Wake Source: Unknown 

Event[6841]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-27T12:32:54.3600000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[6842]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-27T12:32:53.8330000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[6843]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T12:32:53.8320000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 23 to 25.

Reason Unknown 

BootId: 18 

Event[6844]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T12:32:53.6720000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 22 to 23.

Reason SxTransition 

BootId: 18 

Event[6845]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-27T12:32:53.6710000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[6846]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-27T12:32:53.6710000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[6847]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-27T12:32:53.6710000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[6848]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-27T12:32:53.3520000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[6849]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T12:32:52.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?27T12:32:52.500000000Z from ?2024?-?01?-?27T01:46:06.021467600Z.
Time Delta: 38806478 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?27T12:32:52.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6850]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T01:46:06.0210000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[6851]
  Log Name: System
  Source: EventLog
  Date: 2024-01-27T12:32:52.8390000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 381755 seconds. 

Event[6852]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T01:45:59.7790000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[6853]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T01:45:58.0300000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 21 to 22.

Reason InputAccelerometer 

BootId: 18 

Event[6854]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-27T01:45:58.0180000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[6855]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-27T01:45:57.5660000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[6856]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T01:45:53.5280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {2DE3095A-B49E-418F-B5C1-69D2CCF62A8F} did not register with DCOM within the required timeout. 

Event[6857]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T01:45:52.8260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server MicrosoftWindows.Client.CBS_1000.22681.1000.0_x64__cw5n1h2txyewy!Global.DesktopSpotlight.AppXmakp9w4re9tj70pp8mcdrt273xajen0x.mca did not register with DCOM within the required timeout. 

Event[6858]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-27T01:45:52.8240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server Microsoft.MicrosoftOfficeHub_18.2311.1071.0_x64__8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub.AppXvhez9tbpytkh6zv5q0bx5fj12yay14wg.mca did not register with DCOM within the required timeout. 

Event[6859]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[6860]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[6861]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[6862]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[6863]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[6864]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[6865]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[6866]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[6867]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[6868]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[6869]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}" 

Event[6870]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[6871]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[6872]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[6873]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{540057bf-bb0d-11ee-8953-086ac578260b}" 

Event[6874]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[6875]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca1-31dd-9bac-2041830 

Event[6876]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[6877]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-27T01:45:50.8670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[6878]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T01:43:57.8510000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000A20000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6879]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T01:43:57.8040000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6880]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T01:41:53.9430000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6881]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T01:41:53.9290000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000220000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6882]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T01:41:53.8270000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000220000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6883]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T01:41:53.8160000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000220000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6884]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T01:40:58.2290000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000220000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6885]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T01:40:58.2240000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000B20000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6886]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-27T01:40:53.4360000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000B20000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6887]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T01:40:49.2200000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6888]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-27T01:16:49.0540000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 213056 seconds since the last report. 

Event[6889]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-27T01:16:49.0540000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 213056 seconds since the last report. 

Event[6890]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-27T01:16:49.0540000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 213056 seconds since the last report. 

Event[6891]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-27T01:16:49.0540000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 213056 seconds since the last report. 

Event[6892]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-27T01:16:49.0380000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 213056 seconds since the last report. 

Event[6893]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-27T01:16:49.0380000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 213056 seconds since the last report. 

Event[6894]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-27T01:16:49.0380000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 213056 seconds since the last report. 

Event[6895]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-27T01:16:49.0380000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 213056 seconds since the last report. 

Event[6896]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-27T01:00:53.0610000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 13 keys and creating 2 modified pages. 

Event[6897]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-27T00:44:13.5660000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslaae8371d
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1B125D9D-3F17-478E-92D3-BE14A8DE98F4}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[6898]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T00:44:13.5070000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2752.0) - Current Channel (Broad) 

Event[6899]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T00:44:09.3340000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2752.0) - Current Channel (Broad) 

Event[6900]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-27T00:44:09.3340000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6901]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T23:33:02.8860000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6902]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T23:30:58.5060000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6903]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T22:40:20.7540000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6904]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T22:38:09.4840000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6905]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T22:25:33.5550000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\SystemAppData\Helium\UserClasses.dat was cleared updating 9 keys and creating 2 modified pages. 

Event[6906]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T22:25:33.5530000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\SystemAppData\Helium\User.dat was cleared updating 8 keys and creating 1 modified pages. 

Event[6907]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-26T22:16:38.6570000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 19 to 21.

Reason InputAccelerometer 

BootId: 18 

Event[6908]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-26T21:21:46.5270000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 18 to 19.

Reason SessionUnlock 

BootId: 18 

Event[6909]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T20:43:21.3610000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6910]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T20:43:21.3180000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6911]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T20:40:58.1990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6912]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T20:40:58.1940000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6913]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T20:40:53.3400000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6914]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T20:40:49.1900000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6915]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T20:28:29.1880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?26T20:28:29.105519900Z from ?2024?-?01?-?26T20:28:29.105154600Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 23992).

RTC time: ?2024?-?01?-?26T20:28:29.105519900Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[6916]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T20:28:29.1050000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[6917]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T20:28:29.1050000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[6918]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T20:28:29.1040000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[6919]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T15:43:05.3910000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6920]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T15:43:05.3500000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6921]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T15:40:58.2130000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6922]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T15:40:58.2010000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6923]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T15:40:53.3860000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6924]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T15:40:49.1920000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[6925]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T15:35:36.7980000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\NotepadPlusPlus_7njy0v32s6xk6\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\f3851eb54fd8cf6f_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6926]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T15:35:36.7970000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NotepadPlusPlus_7njy0v32s6xk6\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6927]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T15:35:36.7960000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NotepadPlusPlus_7njy0v32s6xk6\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6928]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T14:54:42.0550000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. 

Event[6929]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T14:54:41.8400000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop 

Event[6930]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T14:54:41.1570000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5319275A.WhatsAppDesktop_2.2401.4.0_x64__cv1g1gvanyjgm\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[6931]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T14:54:00.9870000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6932]
  Log Name: System
  Source: Microsoft-Windows-DNS-Client
  Date: 2024-01-26T13:18:11.6640000Z
  Event ID: 1014
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-20
  User Name: NT AUTHORITY\NETWORK SERVICE
  Computer: PC-Main
  Description: 
Name resolution for the name rr3---sn-aigl6nzs.googlevideo.com timed out after none of the configured DNS servers responded. Client PID 39924. 

Event[6933]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:12:19.2940000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{75A827B3-A411-4CBF-BCE2-668B3DCDD7E9} was cleared updating 14861 keys and creating 2497 modified pages. 

Event[6934]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:12:16.2500000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9MSMLRH6LZF3-Microsoft.WindowsNotepad 

Event[6935]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:12:15.0030000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MSMLRH6LZF3-Microsoft.WindowsNotepad 

Event[6936]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:12:14.0620000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsNotepad_11.2312.18.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[6937]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:12:13.2690000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9MZ95KL8MR0L-Microsoft.ScreenSketch 

Event[6938]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:12:11.8950000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy5\WINDOWS\System32\config\DRIVERS (TM: {54005fcf-bb0d-11ee-8953-086ac578260b}, RM: {54005fce-bb0d-11ee-8953-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[6939]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:12:11.8350000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy5\WINDOWS\System32\config\SYSTEM (TM: {54005fcc-bb0d-11ee-8953-086ac578260b}, RM: {54005fcb-bb0d-11ee-8953-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[6940]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:12:11.6790000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MZ95KL8MR0L-Microsoft.ScreenSketch 

Event[6941]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:12:10.4110000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ScreenSketch_11.2312.33.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[6942]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:12:07.1810000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ364-MICROSOFT.SKYPEAPP 

Event[6943]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:12:06.4970000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6944]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:12:06.3300000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJ364-MICROSOFT.SKYPEAPP 

Event[6945]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:12:05.5600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SkypeApp_15.111.3607.0_x64__kzf8qxf38zg5c\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[6946]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:54.7240000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6947]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:53.0160000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBBG-MICROSOFT.WINDOWSCAMERA 

Event[6948]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:11:52.5430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsCamera_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6949]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:52.3530000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJBBG-MICROSOFT.WINDOWSCAMERA 

Event[6950]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:11:51.5760000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2023.2312.3.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[6951]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:44.8130000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6952]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:42.8850000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PR-MICROSOFT.WINDOWSALARMS 

Event[6953]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:11:42.0340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. 

Event[6954]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:41.8240000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PR-MICROSOFT.WINDOWSALARMS 

Event[6955]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:40.9980000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6956]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:11:40.9410000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_11.2312.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[6957]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:38.9990000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWKN-MICROSOFT.WINDOWSSOUNDRECORDER 

Event[6958]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:11:38.6840000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6959]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:38.4440000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFHWKN-MICROSOFT.WINDOWSSOUNDRECORDER 

Event[6960]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:11:37.7290000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_11.2312.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[6961]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:28.9580000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6962]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:27.1150000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9PG2DK419DRG-Microsoft.WebpImageExtension 

Event[6963]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T13:11:26.8570000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WebpImageExtension_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6964]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:26.7390000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9PG2DK419DRG-Microsoft.WebpImageExtension 

Event[6965]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:10.7970000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6966]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:10.7970000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6967]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T13:11:10.7970000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6968]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T12:30:53.0920000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6969]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T12:13:49.0920000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6970]
  Log Name: System
  Source: EventLog
  Date: 2024-01-26T12:00:00.4110000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 293383 seconds. 

Event[6971]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T11:56:45.0910000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6972]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T11:39:41.0900000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6973]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T11:24:22.9120000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\LandfallGames.TotallyAccurateBattleSimulator_r2vq7k2y0v9ct\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6974]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T11:22:21.0980000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[6975]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T11:22:21.0850000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[6976]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T10:49:24.2530000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsld6a62da2
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5D859EC3-E6D9-4DB5-A3CB-969F23C6A380}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[6977]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T10:49:24.2400000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2726.0) - Current Channel (Broad) 

Event[6978]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T10:49:19.9010000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2726.0) - Current Channel (Broad) 

Event[6979]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-26T10:49:12.6440000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[6980]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:46:29.7510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[6981]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:43:09.5180000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6982]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T10:43:09.5020000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[6983]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-26T10:42:43.7930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[6984]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:42:14.1430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[6985]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:42:14.1400000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\User.dat was cleared updating 7 keys and creating 1 modified pages. 

Event[6986]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:41:05.6580000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6987]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:41:05.6410000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6988]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:41:05.5330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6989]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:41:05.5150000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6990]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:41:01.5530000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6991]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:41:01.5390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6992]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:41:01.4370000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6993]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:41:01.4250000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6994]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:40:57.4190000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6995]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:40:57.4070000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6996]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:40:57.3020000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6997]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:40:57.2950000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000008). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6998]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:40:49.3400000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000008). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[6999]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:40:49.3240000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000007). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7000]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-26T10:40:49.2160000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000007). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7001]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:40:10.2900000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\Settings\settings.dat was cleared updating 28 keys and creating 5 modified pages. 

Event[7002]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-26T10:39:55.9400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7003]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:39:53.4100000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?26T10:39:53.323198900Z from ?2024?-?01?-?26T10:39:53.322346300Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 12388).

RTC time: ?2024?-?01?-?26T10:39:53.323198900Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7004]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:39:53.3230000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7005]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:39:53.3220000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?26T10:39:53.235879600Z from ?2024?-?01?-?26T10:39:53.235107200Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 12388).

RTC time: ?2024?-?01?-?26T10:39:53.235879600Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7006]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:39:53.2360000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7007]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T10:39:53.2350000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[7008]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:39:53.2350000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?26T10:39:53.151522800Z from ?2024?-?01?-?26T10:39:57.228263200Z.
Time Delta: -4076 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 12388).

RTC time: ?2024?-?01?-?26T10:39:53.151522800Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7009]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:39:53.1510000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7010]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-26T10:39:55.7490000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7011]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 47276. 

Event[7012]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 47276. 

Event[7013]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[7014]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[7015]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7016]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7017]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[7018]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[7019]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[7020]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[7021]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[7022]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{540057bf-bb0d-11ee-8953-086ac578260b}" 

Event[7023]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[7024]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[7025]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[7026]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[7027]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[7028]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[7029]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[7030]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca1-31dd-9ba 

Event[7031]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 4; device name: \Volume{234e3a45-fca1-31dd-9bac-204183070f1e}. 

Event[7032]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[7033]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca1-31dd-9bac-204183070f1e}" created 

Event[7034]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[7035]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[7036]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[7037]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[7038]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[7039]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 4l 

Event[7040]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[7041]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[7042]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-26T10:39:47.6210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[7043]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-26T10:39:44.9900000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7044]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T10:39:41.2390000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[7045]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-26T10:39:10.6570000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7046]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:39:04.5820000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[7047]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:39:04.5140000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[7048]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-26T10:39:02.3190000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7049]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-26T10:39:02.3170000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7050]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-26T10:39:01.5630000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[7051]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-26T10:39:00.4600000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[7052]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-26T10:39:00.4100000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[7053]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-26T10:39:00.0160000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 16 to 18.

Reason Unknown 

BootId: 18 

Event[7054]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-26T10:38:59.7700000Z
  Event ID: 134
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) 

Event[7055]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-26T10:38:59.7600000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 15 to 16.

Reason SxTransition 

BootId: 18 

Event[7056]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-26T10:38:59.7600000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[7057]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-26T10:38:59.7600000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[7058]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-26T10:38:59.7590000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[7059]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-26T10:38:59.0550000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[7060]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-26T10:38:58.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?26T10:38:58.500000000Z from ?2024?-?01?-?24T23:27:58.835841800Z.
Time Delta: 126659664 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?26T10:38:58.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7061]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-24T23:27:58.8360000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[7062]
  Log Name: System
  Source: EventLog
  Date: 2024-01-26T10:38:58.8410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 288517 seconds. 

Event[7063]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T23:27:54.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?24T23:27:54.500000000Z from ?2024?-?01?-?24T23:27:53.203546400Z.
Time Delta: 1296 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?24T23:27:54.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7064]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-24T23:27:50.9900000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[7065]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-24T23:27:49.1550000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 14 to 15.

Reason InputHid 

BootId: 18 

Event[7066]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-24T23:27:49.1520000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[7067]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-24T23:27:48.6850000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[7068]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-24T23:27:47.1460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {2DE3095A-B49E-418F-B5C1-69D2CCF62A8F} did not register with DCOM within the required timeout. 

Event[7069]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[7070]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[7071]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[7072]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[7073]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[7074]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[7075]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[7076]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[7077]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[7078]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[7079]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" 

Event[7080]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[7081]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[7082]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[7083]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{5cfb2116-b997-11ee-8953-086ac578260b}" 

Event[7084]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[7085]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca0-31dd-9bac-2041830 

Event[7086]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[7087]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[7088]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T23:27:45.1200000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[7089]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T21:19:28.9040000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7090]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T21:19:28.8990000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7091]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T21:17:01.7520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7092]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T21:17:01.7410000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7093]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T21:16:56.9250000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7094]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T21:16:52.7370000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7095]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:29:38.1830000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000008). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7096]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T18:29:38.1800000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7097]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:27:34.3290000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000008). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7098]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:27:34.3240000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000007). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7099]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:27:34.1970000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000007). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7100]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:27:34.1860000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7101]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:26:25.2770000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7102]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:26:25.2730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7103]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:26:25.1770000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7104]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:26:25.1690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7105]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:25:37.8660000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7106]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:25:37.8540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7107]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T18:25:32.9610000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7108]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T18:25:28.8460000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7109]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T16:19:17.0180000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7110]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T16:19:17.0020000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7111]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T16:17:01.8090000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7112]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T16:17:01.7880000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7113]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T16:16:57.0300000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7114]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T16:16:52.7420000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7115]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-24T15:38:48.9410000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7116]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-24T15:21:44.9390000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7117]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-24T15:04:40.9310000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7118]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-24T14:47:36.9260000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7119]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:32:08.0560000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3PT-MICROSOFT.ZUNEMUSIC 

Event[7120]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T14:32:06.4990000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[7121]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:32:06.3120000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJ3PT-MICROSOFT.ZUNEMUSIC 

Event[7122]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:32:06.2950000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 

Event[7123]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:32:04.3650000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NBLGGH3FRZM-Microsoft.VCLibs.140.00 

Event[7124]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T14:32:02.5150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_11.2312.7.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[7125]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:31:45.9550000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7126]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:31:41.0450000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7127]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:31:40.7590000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7128]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:30:40.6330000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7129]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:30:39.5080000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7130]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:30:28.0360000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7131]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T14:30:25.7680000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7132]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-24T14:30:16.9350000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[7133]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-24T14:30:16.9230000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7134]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-24T14:05:52.1710000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 128047 seconds since the last report. 

Event[7135]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-24T14:05:52.1710000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 128047 seconds since the last report. 

Event[7136]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-24T14:05:52.1710000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 128047 seconds since the last report. 

Event[7137]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-24T14:05:52.1710000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 128047 seconds since the last report. 

Event[7138]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-24T14:05:52.1550000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 128047 seconds since the last report. 

Event[7139]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-24T14:05:52.1550000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 128047 seconds since the last report. 

Event[7140]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-24T14:05:52.1550000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 128047 seconds since the last report. 

Event[7141]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-24T14:05:52.1550000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 128047 seconds since the last report. 

Event[7142]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T12:35:08.5030000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl4bf92b2e
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{DCBFDC88-EA28-43D9-B616-3A956E89F3E2}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[7143]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T12:35:08.4480000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2629.0) - Current Channel (Broad) 

Event[7144]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T12:35:03.6740000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2629.0) - Current Channel (Broad) 

Event[7145]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-24T12:35:00.5280000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7146]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T12:13:57.6700000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[7147]
  Log Name: System
  Source: EventLog
  Date: 2024-01-24T12:00:00.9960000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 120580 seconds. 

Event[7148]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:28:37.0920000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7149]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T11:28:37.0550000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7150]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:26:33.2080000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7151]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:26:33.1870000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7152]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:26:33.0850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7153]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:26:33.0770000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7154]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:25:37.5890000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7155]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:25:37.5730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7156]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:25:32.6970000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7157]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T11:25:28.5640000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7158]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:22:00.6900000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7159]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T11:22:00.6590000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7160]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:19:49.5510000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7161]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:19:49.5320000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7162]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:19:44.6700000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7163]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T11:19:40.5260000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7164]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:19:21.0560000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000006). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7165]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T11:19:21.0470000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7166]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:17.1710000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000006). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7167]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:17.1650000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7168]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:17.0660000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7169]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:17.0590000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7170]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:13.0610000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7171]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:13.0520000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000008). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7172]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:12.9490000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000008). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7173]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:12.9400000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000006). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7174]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:01.7590000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000006). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7175]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:17:01.7370000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000007). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7176]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-24T11:16:56.8860000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000007). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7177]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T11:16:52.7320000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7178]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-24T11:15:55.4510000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7179]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-24T11:15:35.6510000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 12 to 14.

Reason InputHid 

BootId: 18 

Event[7180]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-24T11:05:25.4960000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 11 to 12.

Reason SessionUnlock 

BootId: 18 

Event[7181]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-24T11:04:52.8820000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7182]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-24T11:03:45.6010000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7183]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-24T11:03:42.1530000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7184]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 16856. 

Event[7185]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 16856. 

Event[7186]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[7187]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[7188]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7189]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7190]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[7191]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[7192]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[7193]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[7194]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[7195]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{5cfb2116-b997-11ee-8953-086ac578260b}" 

Event[7196]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[7197]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[7198]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[7199]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[7200]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[7201]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[7202]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[7203]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca0-31dd-9ba 

Event[7204]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 3; device name: \Volume{234e3a45-fca0-31dd-9bac-204183070f1e}. 

Event[7205]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[7206]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca0-31dd-9bac-204183070f1e}" created 

Event[7207]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[7208]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[7209]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[7210]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[7211]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[7212]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 3l 

Event[7213]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[7214]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[7215]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-24T11:03:32.1200000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[7216]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T11:03:28.9950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?24T11:03:28.914396200Z from ?2024?-?01?-?24T11:03:28.913669100Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 9788).

RTC time: ?2024?-?01?-?24T11:03:28.914396200Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7217]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T11:03:28.9140000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7218]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T11:03:28.9130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?24T11:03:28.832361500Z from ?2024?-?01?-?24T11:03:28.832180300Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 9788).

RTC time: ?2024?-?01?-?24T11:03:28.832361500Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7219]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T11:03:28.8320000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7220]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-24T11:03:28.8320000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[7221]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T11:03:28.8320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?24T11:03:28.748910800Z from ?2024?-?01?-?24T11:03:32.276384400Z.
Time Delta: -3527 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 9788).

RTC time: ?2024?-?01?-?24T11:03:28.748910800Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7222]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T11:03:28.7490000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7223]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-24T11:03:32.2760000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[7224]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-24T11:03:31.0430000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7225]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-24T11:02:58.7950000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[7226]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-24T11:02:51.9950000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7227]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-24T11:02:51.9920000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7228]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-24T11:02:51.7450000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[7229]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-24T11:02:51.4020000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[7230]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-24T11:02:51.0580000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 9 to 11.

Reason Unknown 

BootId: 18 

Event[7231]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-24T11:02:50.7470000Z
  Event ID: 134
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) 

Event[7232]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-24T11:02:50.7380000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 8 to 9.

Reason SxTransition 

BootId: 18 

Event[7233]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-24T11:02:50.7380000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[7234]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-24T11:02:50.7380000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[7235]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-24T11:02:50.7380000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[7236]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-24T11:02:50.0640000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[7237]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-24T11:02:49.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?24T11:02:49.500000000Z from ?2024?-?01?-?23T23:31:41.022892800Z.
Time Delta: 41468477 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?24T11:02:49.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7238]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T23:31:41.0220000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[7239]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T23:31:34.4830000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[7240]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T23:31:22.3460000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 7 to 8.

Reason Unknown 

BootId: 18 

Event[7241]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T23:31:22.3310000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[7242]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-23T23:31:21.7970000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[7243]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T23:30:58.6200000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7244]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-23T20:54:33.7850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[7245]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-23T20:53:56.2940000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7246]
  Log Name: System
  Source: User32
  Date: 2024-01-23T20:17:42.5500000Z
  Event ID: 1073
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The attempt by user PC-MAIN\felip to restart/shutdown computer PC-MAIN failed 

Event[7247]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[7248]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[7249]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[7250]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[7251]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[7252]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[7253]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[7254]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[7255]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[7256]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[7257]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" 

Event[7258]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[7259]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[7260]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[7261]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{d4764b5a-b7bf-11ee-8951-6245b4eb6eb6}" 

Event[7262]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[7263]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca3-31dd-9bac-2041830 

Event[7264]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[7265]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[7266]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T20:17:33.7070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[7267]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T20:04:44.5730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7268]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T20:04:44.5570000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7269]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T20:04:17.4890000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[7270]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T20:03:50.9250000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 58 keys and creating 8 modified pages. 

Event[7271]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T20:02:36.6960000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7272]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T20:02:36.6900000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7273]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T20:02:36.5940000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7274]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T20:02:36.5870000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7275]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T20:02:13.3520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7276]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T20:02:13.3460000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7277]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T20:02:08.5150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7278]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T20:02:04.3430000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7279]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-23T19:37:24.0440000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy5) is healthy.  No action is needed. 

Event[7280]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T19:35:47.5500000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 7 keys and creating 2 modified pages. 

Event[7281]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T19:18:53.6690000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[7282]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 32412. 

Event[7283]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 32412. 

Event[7284]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[7285]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[7286]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7287]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7288]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[7289]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[7290]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[7291]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[7292]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[7293]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{d4764b5a-b7bf-11ee-8951-6245b4eb6eb6}" 

Event[7294]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[7295]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[7296]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[7297]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[7298]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[7299]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[7300]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[7301]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca3-31dd-9ba 

Event[7302]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 2; device name: \Volume{234e3a45-fca3-31dd-9bac-204183070f1e}. 

Event[7303]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[7304]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca3-31dd-9bac-204183070f1e}" created 

Event[7305]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[7306]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[7307]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[7308]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[7309]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[7310]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 2l 

Event[7311]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[7312]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[7313]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:08:05.5250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[7314]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[7315]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[7316]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[7317]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[7318]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[7319]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[7320]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[7321]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[7322]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[7323]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[7324]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[7325]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[7326]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{459220dc-b8aa-11ee-8952-6245b4eb6eb6}" 

Event[7327]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[7328]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[7329]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[7330]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[7331]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T18:07:47.0450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[7332]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-23T17:22:56.4630000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7333]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-23T17:05:52.4590000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7334]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-23T16:48:48.4600000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7335]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-23T16:31:44.4590000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7336]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T16:18:22.8590000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7337]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T16:16:18.7890000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7338]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T16:16:15.3160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\PocketpairInc.Palworld_ad4psfrxyesvt\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[7339]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T16:15:26.5020000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB 

Event[7340]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T16:15:25.6000000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRD29V9-MICROSOFT.MICROSOFTOFFICEHUB 

Event[7341]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T16:15:24.9730000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftOfficeHub_18.2311.1071.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[7342]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T16:14:45.7490000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7343]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-23T16:14:24.4610000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[7344]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-23T16:14:24.4490000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7345]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:12:09.5350000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7346]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T15:12:09.5230000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7347]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:09:57.6430000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7348]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:09:57.6360000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7349]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:09:57.5380000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7350]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:09:57.5290000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7351]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:08:12.9180000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7352]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:08:12.9070000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7353]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:08:12.7390000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7354]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:08:12.7290000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7355]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:06:32.1570000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7356]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:06:32.1500000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7357]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:06:32.0520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7358]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:06:32.0310000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7359]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:04:27.3830000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7360]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:04:27.3770000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7361]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:04:27.2780000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7362]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:04:27.2680000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7363]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:03:22.8080000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7364]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:03:22.8000000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000006). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7365]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:03:22.7010000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000006). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7366]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:03:22.6820000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7367]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:18.3060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7368]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:18.2980000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000A20000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7369]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:18.2000000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7370]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:18.1950000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7371]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:08.2880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7372]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:08.2790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFF00001720000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7373]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:08.1710000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFF00001720000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7374]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:08.1650000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000005). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7375]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:04.2220000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000005). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7376]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:04.2160000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7377]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:04.1150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7378]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:02:04.1080000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7379]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:01:25.8760000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7380]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:01:25.8700000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000A20000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7381]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:01:25.7750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7382]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:01:25.7650000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7383]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:00:06.2210000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7384]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:00:06.2030000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7385]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T15:00:01.3190000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7386]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T14:59:57.1970000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7387]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T14:58:12.0370000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftTeams_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[7388]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T14:03:50.9270000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1047 keys and creating 62 modified pages. 

Event[7389]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T13:51:43.4710000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[7390]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:47:10.0210000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000004). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7391]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T13:47:09.9880000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7392]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:45:06.1150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000004). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7393]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:45:06.0990000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000A20000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7394]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:45:05.9980000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000A20000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7395]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:45:05.9930000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7396]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:44:54.7880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7397]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:44:54.7800000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7398]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:44:49.9670000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7399]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T13:44:45.7740000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7400]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T13:34:55.8480000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\a741c31b50079fb3_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7401]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T13:34:55.8470000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7402]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T13:34:55.8470000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7403]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T13:05:34.9560000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[7404]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T13:05:34.8930000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\19411d693a0b3fdb_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7405]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T13:05:34.8910000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 26 keys and creating 2 modified pages. 

Event[7406]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T13:05:34.8830000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 16 keys and creating 1 modified pages. 

Event[7407]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:05:24.1490000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7408]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T13:05:24.1400000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7409]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:03:12.3500000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7410]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:03:12.3450000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7411]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:03:12.2380000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7412]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:03:12.2320000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7413]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:02:56.9400000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7414]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:02:56.9330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7415]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T13:02:52.0880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7416]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T13:02:47.9280000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7417]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T12:34:20.6860000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl7af7bc39
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{84306F12-1820-473D-8F47-C28D61A28098}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[7418]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T12:34:20.6610000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2565.0) - Current Channel (Broad) 

Event[7419]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T12:34:16.0650000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2565.0) - Current Channel (Broad) 

Event[7420]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T12:34:15.8160000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7421]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T12:29:18.3400000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[7422]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-23T12:23:38.0690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[7423]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T12:23:15.4370000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NMPJ99VJBWV-Microsoft.YourPhone 

Event[7424]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T12:23:13.9380000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone 

Event[7425]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T12:23:13.3850000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7426]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T12:23:11.2950000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7427]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T12:22:35.2060000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000003). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7428]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T12:22:35.1900000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7429]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T12:20:53.4450000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7430]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-23T12:20:43.2120000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7431]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:35.0990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[7432]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 30068. 

Event[7433]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 30068. 

Event[7434]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[7435]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[7436]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7437]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7438]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[7439]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7030000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[7440]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[7441]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{459220dc-b8aa-11ee-8952-6245b4eb6eb6}" 

Event[7442]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[7443]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[7444]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[7445]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[7446]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[7447]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[7448]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[7449]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[7450]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[7451]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[7452]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[7453]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[7454]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[7455]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[7456]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[7457]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[7458]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[7459]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[7460]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[7461]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[7462]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[7463]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-23T12:20:32.7010000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[7464]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T12:20:31.3210000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000003). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7465]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T12:20:31.3120000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000002). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7466]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T12:20:31.2110000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000002). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7467]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T12:20:31.2020000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7468]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T12:20:20.3480000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7469]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T12:20:20.3390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7470]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T12:20:19.1220000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x2534 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7471]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T12:20:11.3330000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7472]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-23T12:19:58.0060000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7473]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-23T12:19:15.7040000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7474]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-23T12:19:03.1640000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7475]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-23T12:19:03.1610000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7476]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-23T12:19:02.7230000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[7477]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-23T12:17:08.5770000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[7478]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-23T12:17:07.9260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?23T12:13:39.083619100Z
Wake Time: ?2024?-?01?-?23T12:17:06.885729400Z

Wake Source: Unknown 

Event[7479]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-23T12:17:07.4420000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[7480]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T12:17:07.1000000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 5 to 7.

Reason Unknown 

BootId: 18 

Event[7481]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T12:17:06.7760000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason SxTransition 

BootId: 18 

Event[7482]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T12:17:06.7750000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[7483]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T12:17:06.7750000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[7484]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T12:17:06.7750000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[7485]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-23T12:17:06.0700000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[7486]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T12:17:05.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?23T12:17:05.500000000Z from ?2024?-?01?-?23T12:14:03.965581300Z.
Time Delta: 181534 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?23T12:17:05.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7487]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T12:14:03.9650000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[7488]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T12:13:57.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?23T12:13:57.500000000Z from ?2024?-?01?-?23T12:13:56.105579000Z.
Time Delta: 1394 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?23T12:13:57.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7489]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T12:13:55.3780000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[7490]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T12:13:39.0940000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 3 to 4.

Reason InputHid 

BootId: 18 

Event[7491]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T12:13:39.0830000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[7492]
  Log Name: System
  Source: User32
  Date: 2024-01-23T12:13:38.4020000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The process C:\WINDOWS\system32\winlogon.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
 Reason Code: 0x500ff
 Shut-down Type: power off
 Comment:  

Event[7493]
  Log Name: System
  Source: EventLog
  Date: 2024-01-23T12:00:00.9340000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 34176 seconds. 

Event[7494]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T10:43:29.8730000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 3.

Reason InputHid 

BootId: 18 

Event[7495]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T05:30:50.6970000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason SessionUnlock 

BootId: 18 

Event[7496]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T02:34:57.8400000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7497]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T02:33:22.7240000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslc285894c
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7AC6CCBF-3947-4311-BD74-D209A2E9AD94}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[7498]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-23T02:32:59.0800000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7499]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:32:50.2190000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/8b458b3a-f51f-42de-8035-0a572134dce3/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x1724 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[7500]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:32:50.2180000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000A20000001. Status 0x0. Process Id 0x1724 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[7501]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:31:44.2930000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7502]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:31:44.2930000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7503]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:31:44.2930000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7504]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:31:44.2930000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7505]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:31:44.2770000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7506]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:31:44.2770000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7507]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:31:44.2770000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7508]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:31:44.2770000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7509]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T02:30:59.9220000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[7510]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-23T02:30:56.3830000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[7511]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-23T02:30:56.2410000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[7512]
  Log Name: System
  Source: TPM
  Date: 2024-01-23T02:30:55.7000000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[7513]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T02:30:52.9220000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[7514]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:51.1100000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7515]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-23T02:30:50.1340000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[7516]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0940000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x1808 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[7517]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0940000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x1808 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[7518]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-23T02:30:50.0790000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[7519]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7520]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7521]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7522]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7523]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7524]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7525]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7526]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7527]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7528]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7529]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7530]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7531]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7532]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7533]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7534]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7535]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:30:50.0040000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7536]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-23T02:30:48.8230000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[7537]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-23T02:30:48.8180000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[7538]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-23T02:30:48.8180000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[7539]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-23T02:30:48.8180000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[7540]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:48.8040000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7541]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:48.8000000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7542]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:48.7950000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7543]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:48.7950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[7544]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:48.7950000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7545]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:48.7910000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7546]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:48.7830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7547]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:48.7790000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7548]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-23T02:30:47.7650000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[7549]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-23T02:30:47.7650000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[7550]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-23T02:30:47.7610000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[7551]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7530000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[7552]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7520000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[7553]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7410000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[7554]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7380000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[7555]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7240000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[7556]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7220000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[7557]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7200000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[7558]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7150000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[7559]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7040000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[7560]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.7000000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[7561]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-23T02:30:47.6850000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[7562]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-23T02:30:47.6390000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[7563]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-23T02:30:47.6390000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[7564]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-23T02:30:45.7900000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[7565]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T02:30:45.4120000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7566]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-23T02:30:44.7740000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[7567]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-23T02:30:44.5270000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[7568]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-23T02:30:43.6380000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[7569]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-23T02:30:43.2690000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[7570]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-23T02:30:40.9310000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[7571]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-23T02:30:35.9990000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[7572]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-23T02:30:34.0810000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[7573]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-23T02:30:33.4810000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[7574]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-23T02:30:33.2910000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7575]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-23T02:30:33.2910000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7576]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-23T02:30:33.2290000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7577]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-23T02:30:33.2290000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7578]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-23T02:30:33.2130000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7579]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-23T02:30:33.1970000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[7580]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-23T02:30:33.1970000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[7581]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-23T02:30:33.1350000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[7582]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1390000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7583]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7584]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7585]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1360000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7586]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1300000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7587]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1290000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7588]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7589]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7590]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1210000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7591]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1200000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7592]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1160000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7593]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7594]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1110000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7595]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1110000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7596]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7597]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7598]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1020000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7599]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.1010000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7600]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.0980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7601]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.0970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7602]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.0960000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7603]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.0950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7604]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.0940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7605]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-23T02:30:33.0810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[7606]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T02:30:32.5170000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[7607]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T02:30:32.5050000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[7608]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-23T02:30:32.4980000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[7609]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:32.4210000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7610]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:32.2360000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7611]
  Log Name: System
  Source: volmgr
  Date: 2024-01-23T02:30:32.1490000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[7612]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-23T02:30:32.0640000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[7613]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:26.9010000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7614]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:26.9000000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7615]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-23T02:30:26.9000000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7616]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-23T02:30:25.1280000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[7617]
  Log Name: System
  Source: EventLog
  Date: 2024-01-23T02:30:48.9350000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 24 seconds. 

Event[7618]
  Log Name: System
  Source: EventLog
  Date: 2024-01-23T02:30:48.9340000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[7619]
  Log Name: System
  Source: EventLog
  Date: 2024-01-23T02:30:48.9340000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[7620]
  Log Name: System
  Source: EventLog
  Date: 2024-01-23T02:30:48.9340000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 02:15:23 on ?23/?01/?2024 was unexpected. 

Event[7621]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T02:30:25.0770000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[7622]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T02:30:25.0720000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[7623]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T02:30:25.0720000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[7624]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T02:30:25.0720000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[7625]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T02:30:25.0720000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?23T02:30:23.000000000Z. 

Event[7626]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T02:30:25.0720000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[7627]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T02:30:25.0720000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[7628]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T02:30:25.0720000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[7629]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-23T02:30:25.0720000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[7630]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T02:30:25.0720000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?23T02:30:24.500000000Z. 

Event[7631]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:03:56.0900000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000004). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7632]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:03:56.0740000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000002). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7633]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:03:55.9670000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000002). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7634]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-23T02:03:55.9620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000C20000003). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7635]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-23T00:24:31.8630000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl4d81c9c3
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7AC6CCBF-3947-4311-BD74-D209A2E9AD94}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[7636]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T00:24:31.8350000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2535.0) - Current Channel (Broad) 

Event[7637]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T00:24:27.6440000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2535.0) - Current Channel (Broad) 

Event[7638]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-23T00:24:27.6440000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7639]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T00:23:40.3730000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?23T00:23:40.293223500Z from ?2024?-?01?-?23T00:23:40.292699400Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 33600).

RTC time: ?2024?-?01?-?23T00:23:40.293223500Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7640]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T00:23:40.2930000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7641]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T00:23:40.2920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?23T00:23:40.209801900Z from ?2024?-?01?-?23T00:23:40.209635000Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 33600).

RTC time: ?2024?-?01?-?23T00:23:40.209801900Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7642]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T00:23:40.2100000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7643]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-23T00:23:40.2090000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[7644]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T00:23:40.2090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?23T00:23:40.120539800Z from ?2024?-?01?-?23T00:23:46.553376000Z.
Time Delta: -6432 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 33600).

RTC time: ?2024?-?01?-?23T00:23:40.120539800Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7645]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-23T00:23:40.1210000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7646]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-23T00:23:46.5520000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[7647]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T22:11:29.7940000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000C20000003). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7648]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T22:11:29.7750000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000003). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7649]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T22:11:29.6730000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000003). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7650]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T22:11:29.6510000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7651]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-22T22:10:21.6390000Z
  Event ID: 7034
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The EaseUS UPDATE SERVICE service terminated unexpectedly. It has done this 1 time(s). 

Event[7652]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-22T21:26:31.6810000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason SessionUnlock 

BootId: 17 

Event[7653]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T17:11:29.7680000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7654]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T17:11:29.7590000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7655]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T17:11:29.6630000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7656]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T17:11:29.6540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7657]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T16:31:12.7250000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\24716aef7915c612_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7658]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-22T16:26:10.5560000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7659]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-22T16:09:06.5530000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7660]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T16:04:10.7950000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7661]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T16:04:10.7790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000002). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7662]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T16:04:10.6790000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000002). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7663]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T16:04:10.6660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7664]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T16:04:02.5460000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7665]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T16:04:02.5350000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7666]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T16:04:02.4320000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7667]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T16:04:02.4250000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7668]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-22T15:52:02.5450000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7669]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-22T15:34:58.5400000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7670]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T15:18:03.9450000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NMPJ99VJBWV-Microsoft.YourPhone. 

Event[7671]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T15:18:03.6840000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NMPJ99VJBWV-Microsoft.YourPhone 

Event[7672]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T15:18:03.6650000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9PB1QWVW0R95-Microsoft.WindowsAppRuntime.1.4 

Event[7673]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T15:18:02.7800000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9PB1QWVW0R95-Microsoft.WindowsAppRuntime.1.4 

Event[7674]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T15:18:01.3010000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7675]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T15:17:59.6390000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH5R558-Microsoft.Todos 

Event[7676]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:17:59.1340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Todos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7677]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T15:17:58.8210000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NBLGGH5R558-Microsoft.Todos 

Event[7678]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:17:57.8810000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Todos_0.114.7122.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[7679]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T15:17:40.7280000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7680]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T15:17:40.7280000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7681]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-22T15:17:38.5430000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[7682]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-22T15:17:38.5300000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7683]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:26.7400000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7684]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:26.7330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000002). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7685]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:26.6340000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7686]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:26.6290000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000C20000002). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7687]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:10.3990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000C20000002). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7688]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:10.3890000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000C20000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7689]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:10.2850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000C20000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7690]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:10.2740000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7691]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:02.3850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7692]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:02.3660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7693]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:02.2520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7694]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T15:04:02.2280000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7695]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:03:34.1130000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\bfc27b3bb6d0d16c_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7696]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:03:34.1100000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7697]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:03:34.1070000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7698]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:03:34.0520000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7699]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:03:34.0510000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 6 keys and creating 1 modified pages. 

Event[7700]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:03:34.0170000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.PowerToys.ImageResizerContextMenu_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\abc688e25d840df4_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7701]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:03:34.0160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.ImageResizerContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7702]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:03:34.0150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.ImageResizerContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7703]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T15:03:33.6660000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\WinRAR.ShellExtension_s4jet1zx4n14a\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\404089864fa344cb_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7704]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T14:05:45.9450000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7705]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T14:05:35.7210000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7706]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T14:05:35.7210000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7707]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T13:12:12.7140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[7708]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T12:59:12.1520000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[7709]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T12:12:49.4640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[7710]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-22T12:12:49.3820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[7711]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T12:12:36.2840000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7712]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T12:12:26.3450000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7713]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T12:12:26.3450000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7714]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T12:12:06.4280000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.23112.87.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[7715]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T12:11:57.3920000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7716]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T12:11:33.6830000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7717]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T12:11:33.6830000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7718]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T12:11:29.7950000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7719]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T12:11:29.7880000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7720]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-22T12:11:29.6860000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x12C8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7721]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-22T12:11:22.5110000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7722]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 12540. 

Event[7723]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 12540. 

Event[7724]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[7725]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[7726]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7727]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[7728]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[7729]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2840000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[7730]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2820000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[7731]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2820000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[7732]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2820000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[7733]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2820000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{459220dc-b8aa-11ee-8952-6245b4eb6eb6}" 

Event[7734]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[7735]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[7736]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[7737]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[7738]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[7739]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[7740]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[7741]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[7742]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[7743]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[7744]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[7745]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[7746]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[7747]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[7748]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[7749]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[7750]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[7751]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[7752]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[7753]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-22T12:11:16.2810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[7754]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-22T12:10:59.8200000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7755]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-22T12:10:41.9280000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7756]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T12:10:25.1410000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 21 keys and creating 2 modified pages. 

Event[7757]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T12:10:25.1380000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 37 keys and creating 3 modified pages. 

Event[7758]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-22T12:10:25.0450000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[7759]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-22T12:10:24.3790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7760]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-22T12:10:24.3750000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7761]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T12:10:24.2280000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\Users\felip\AppData\Local\Microsoft\Windows\UsrClass.dat was reorganized with a starting size of 10629120 bytes and an ending size of 9584640 bytes. 

Event[7762]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T12:10:24.1500000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\Users\felip\ntuser.dat was reorganized with a starting size of 13262848 bytes and an ending size of 12931072 bytes. 

Event[7763]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-22T12:10:24.0800000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[7764]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T12:03:11.4790000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2513.0) - Current Channel (Broad) 

Event[7765]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-22T12:03:11.4690000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl1b382c16
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7C2E78E4-FE7E-4E04-88D6-3164A33B64A1}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[7766]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T12:03:07.2040000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2513.0) - Current Channel (Broad) 

Event[7767]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-22T12:03:04.5580000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7768]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T12:02:44.7090000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\WINDOWS\System32\config\COMPONENTS was reorganized with a starting size of 61173760 bytes and an ending size of 41172992 bytes. 

Event[7769]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-22T12:02:42.8250000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[7770]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-22T12:02:41.7860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?21T22:40:40.701319400Z
Wake Time: ?2024?-?01?-?22T12:02:40.760779900Z

Wake Source: Unknown 

Event[7771]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-22T12:02:41.1890000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[7772]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-22T12:02:40.8590000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 2 to 4.

Reason Unknown 

BootId: 17 

Event[7773]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-22T12:02:40.7240000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 2.

Reason SxTransition 

BootId: 17 

Event[7774]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-22T12:02:40.7240000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[7775]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-22T12:02:40.7240000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[7776]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-22T12:02:40.7240000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[7777]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-22T12:02:40.0650000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[7778]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-22T12:02:39.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?22T12:02:39.500000000Z from ?2024?-?01?-?21T22:40:46.498952500Z.
Time Delta: 48113001 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?22T12:02:39.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[7779]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T22:40:46.4990000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[7780]
  Log Name: System
  Source: EventLog
  Date: 2024-01-22T12:02:39.8460000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 49765 seconds. 

Event[7781]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T22:40:41.5220000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[7782]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T22:40:40.7040000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason ScreenOffGracePeriod 

BootId: 17 

Event[7783]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T22:40:40.7010000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[7784]
  Log Name: System
  Source: User32
  Date: 2024-01-21T22:40:39.9660000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The process C:\WINDOWS\system32\winlogon.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
 Reason Code: 0x500ff
 Shut-down Type: power off
 Comment:  

Event[7785]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T22:24:00.5470000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2480.0) - Current Channel (Broad) 

Event[7786]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-21T22:24:00.5380000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsld9159559
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BD807A6C-9339-420A-A3C7-47A2E637EF04}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[7787]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T22:23:56.5970000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2480.0) - Current Channel (Broad) 

Event[7788]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T22:23:56.5970000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7789]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:23:26.4690000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.23112.87.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[7790]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T22:23:16.5520000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7791]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T22:23:15.7320000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7792]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T22:23:15.7320000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7793]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-21T22:17:42.9780000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[7794]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-21T22:16:10.2480000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsle8d495f4
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8F04D578-58B7-4AEB-B9AD-72A1AECCE890}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[7795]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-21T22:15:43.8140000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[7796]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:15:37.9720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/da1c1111-e9e8-4c2c-b32f-ded3b03ff3f7/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x155C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[7797]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:15:37.9710000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000C20000001. Status 0x0. Process Id 0x155C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[7798]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:14:33.1480000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7799]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:14:33.1480000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7800]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:14:33.1480000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7801]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:14:33.1480000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7802]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:14:33.1320000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7803]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:14:33.1320000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7804]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:14:33.1320000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7805]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:14:33.1320000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[7806]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-21T22:13:47.0650000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[7807]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-21T22:13:46.5380000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[7808]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-21T22:13:46.3790000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[7809]
  Log Name: System
  Source: TPM
  Date: 2024-01-21T22:13:45.8700000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[7810]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:38.6790000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7811]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-21T22:13:38.1930000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[7812]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-21T22:13:37.7650000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[7813]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.7580000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x1744 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[7814]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.7580000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001020000001. Status 0x0. Process Id 0x1744 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[7815]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-21T22:13:37.7110000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[7816]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7817]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7818]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7819]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7820]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7821]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7822]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7823]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7824]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7825]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7826]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7827]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7828]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7829]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7830]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7831]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7832]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T22:13:37.6610000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[7833]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-21T22:13:36.4870000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[7834]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-21T22:13:36.4810000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[7835]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-21T22:13:36.4810000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[7836]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-21T22:13:36.4800000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[7837]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:36.4470000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7838]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:36.4450000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7839]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:36.4400000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7840]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:36.4400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[7841]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:36.4400000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7842]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:36.4350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7843]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:36.4280000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7844]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:36.4230000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7845]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:36.3690000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 433 keys and creating 93 modified pages. 

Event[7846]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:36.3580000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 206 keys and creating 18 modified pages. 

Event[7847]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:36.1540000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 195 keys and creating 25 modified pages. 

Event[7848]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-21T22:13:36.0760000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[7849]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-21T22:13:36.0760000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[7850]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-21T22:13:36.0720000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[7851]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0640000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[7852]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0640000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[7853]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0520000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[7854]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0490000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[7855]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0350000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[7856]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0330000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[7857]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0310000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[7858]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0250000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[7859]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0150000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[7860]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:36.0110000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[7861]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-21T22:13:35.9960000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[7862]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-21T22:13:35.9730000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[7863]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-21T22:13:35.9730000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[7864]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-21T22:13:34.3840000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[7865]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:34.0330000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[7866]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:33.9850000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 169005056 bytes and an ending size of 168783872 bytes. 

Event[7867]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:32.1840000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 719 keys and creating 71 modified pages. 

Event[7868]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:32.1810000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 76 keys and creating 4 modified pages. 

Event[7869]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:32.1810000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 67 keys and creating 8 modified pages. 

Event[7870]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-21T22:13:32.1630000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[7871]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-21T22:13:31.8250000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[7872]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-21T22:13:30.6420000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[7873]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-21T22:13:29.2170000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[7874]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-21T22:13:27.8440000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[7875]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-21T22:13:24.7630000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[7876]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-21T22:13:22.6270000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[7877]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-21T22:13:22.3360000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[7878]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-21T22:13:22.1470000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7879]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-21T22:13:22.1470000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7880]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-21T22:13:22.0840000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7881]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-21T22:13:22.0840000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7882]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-21T22:13:22.0680000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[7883]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-21T22:13:22.0520000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[7884]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-21T22:13:22.0520000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[7885]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-21T22:13:21.9900000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[7886]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9960000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7887]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7888]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7889]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7890]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7891]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7892]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7893]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[7894]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7895]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7896]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7897]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9720000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7898]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9690000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7899]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7900]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9640000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7901]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9630000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7902]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7903]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9590000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7904]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9550000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7905]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9540000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7906]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7907]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7908]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7909]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-21T22:13:21.9370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[7910]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T22:13:21.6260000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[7911]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T22:13:21.6150000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[7912]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T22:13:21.6130000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[7913]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:21.5860000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7914]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:21.4890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7915]
  Log Name: System
  Source: volmgr
  Date: 2024-01-21T22:13:21.4160000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[7916]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-21T22:13:21.3910000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[7917]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:16.7150000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7918]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:16.7140000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7919]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T22:13:16.7140000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7920]
  Log Name: System
  Source: EventLog
  Date: 2024-01-21T22:13:36.5680000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 22 seconds. 

Event[7921]
  Log Name: System
  Source: EventLog
  Date: 2024-01-21T22:13:36.5680000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[7922]
  Log Name: System
  Source: EventLog
  Date: 2024-01-21T22:13:36.5680000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[7923]
  Log Name: System
  Source: EventLog
  Date: 2024-01-21T22:13:36.5670000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 21:37:02 on ?21/?01/?2024 was unexpected. 

Event[7924]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-21T22:13:15.3080000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[7925]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:15.2650000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[7926]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T22:13:15.2600000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[7927]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T22:13:15.2600000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[7928]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T22:13:15.2600000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[7929]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T22:13:15.2600000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?21T22:13:13.000000000Z. 

Event[7930]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T22:13:15.2600000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[7931]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T22:13:15.2600000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[7932]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T22:13:15.2600000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[7933]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T22:13:15.2600000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[7934]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T22:13:15.2600000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?21T22:13:14.500000000Z. 

Event[7935]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-21T21:51:35.5850000Z
  Event ID: 4
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service stopped. 

Event[7936]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T20:15:18.2460000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 11 keys and creating 1 modified pages. 

Event[7937]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-21T19:17:10.8530000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FsDepends' (10.0, ?2056?-?03?-?07T17:54:55.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[7938]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:09.4160000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{033F37E9-CD1A-4877-8351-DA3DC08A5221} was reorganized with a starting size of 169005056 bytes and an ending size of 168783872 bytes. 

Event[7939]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:05.7180000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{5BAF58D0-4353-4567-8F58-92E763CB4A74} was cleared updating 718 keys and creating 72 modified pages. 

Event[7940]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:05.6860000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{B4CF654B-E0F8-46FF-AF50-EE2C9C09ABDF} was cleared updating 14861 keys and creating 2497 modified pages. 

Event[7941]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:05.6330000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{96D03F08-49EA-43C9-8861-C08A8F77216E} was reorganized with a starting size of 61173760 bytes and an ending size of 41172992 bytes. 

Event[7942]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:04.8980000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{31380794-371D-458B-8F69-7F16B1DD57F5} was cleared updating 76 keys and creating 4 modified pages. 

Event[7943]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:04.8700000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{23DE6FC6-40F3-4D6F-9EB2-082B8B08EFE2} was cleared updating 67 keys and creating 8 modified pages. 

Event[7944]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:04.8500000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\Volume{5bd42a6a-9ad4-47f0-9646-13f5e47e6a6c}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{585B6E36-AC8E-4689-B63C-BEAF5254FC82} was reorganized with a starting size of 21139456 bytes and an ending size of 21008384 bytes. 

Event[7945]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:02.2770000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\WINDOWS\System32\config\DRIVERS (TM: {4cb9b2cb-b876-11ee-8951-6245b4eb6eb6}, RM: {4cb9b2ca-b876-11ee-8951-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[7946]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:02.2570000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\WINDOWS\System32\config\SYSTEM (TM: {4cb9b2c8-b876-11ee-8951-6245b4eb6eb6}, RM: {4cb9b2c7-b876-11ee-8951-6245b4eb6eb6}) finished with result=0xC00000A2 (Internal code=7). 

Event[7947]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T19:17:02.2420000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\WINDOWS\System32\config\SYSTEM was reorganized with a starting size of 21139456 bytes and an ending size of 21008384 bytes. 

Event[7948]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-21T19:16:35.5980000Z
  Event ID: 3
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service started. 

Event[7949]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-21T19:00:19.6160000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy4) is healthy.  No action is needed. 

Event[7950]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-21T19:00:19.5280000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy3) is healthy.  No action is needed. 

Event[7951]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T18:26:26.4180000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:45764) reset policy scheme from {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[7952]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T18:25:19.4030000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000004). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7953]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T18:25:19.3980000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000002). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7954]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T18:25:19.3040000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000002). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7955]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T18:25:19.2990000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7956]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T18:25:15.3610000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7957]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T18:25:15.3560000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000002). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7958]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T18:25:15.2580000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000002). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7959]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T18:25:15.2520000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000001). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7960]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T18:23:39.8340000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:45764) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} 

Event[7961]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T18:23:35.6200000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:47160) reset policy scheme from {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[7962]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T18:16:23.5090000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:47160) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} 

Event[7963]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T18:16:19.4030000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:13940) reset policy scheme from {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[7964]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T17:59:26.5930000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:13940) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} 

Event[7965]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T17:59:25.5550000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:23740) reset policy scheme from {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[7966]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T17:59:10.5590000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:23740) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} 

Event[7967]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T17:59:09.5340000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:23448) reset policy scheme from {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[7968]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-21T17:54:18.6620000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:23448) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} 

Event[7969]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:37:00.1060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/1a6c915a-990c-4b4e-8fb8-e7cc06a865f4/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x1190 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[7970]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:37:00.1060000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001720000001. Status 0x0. Process Id 0x1190 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[7971]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:37:00.0630000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00001020000001. Status 0x0. Process Id 0x1190 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[7972]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:37:00.0630000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/4f338408-eaf8-491a-85b2-dd0783a9fe78/) from URL group (0xFE00001020000001). Process Id 0x1190 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[7973]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:33:33.3730000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7974]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:33:33.3680000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000002). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7975]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:33:33.2690000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000002). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7976]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:33:33.2570000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000003). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7977]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:33:25.2830000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000003). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7978]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:33:25.2720000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000002). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7979]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:33:25.1710000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000002). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7980]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:33:25.1640000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000003). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7981]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:25:29.1880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000003). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7982]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:25:29.1700000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000002). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7983]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:25:29.0670000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000002). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7984]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T17:25:29.0580000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[7985]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T17:18:02.6700000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7986]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T17:18:02.6690000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7987]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T17:18:02.6230000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.OneDriveSync_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\b10ff7f29dc102c2_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[7988]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-21T15:23:50.7720000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7989]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T15:20:05.6890000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 5283840 bytes and an ending size of 5251072 bytes. 

Event[7990]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-21T15:06:46.7680000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7991]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-21T14:49:42.7660000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7992]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-21T14:32:38.7640000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[7993]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T14:15:50.3530000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9P086NHDNB9W-Microsoft.XboxSpeechtoTextOverlay 

Event[7994]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T14:15:48.0470000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH537C2-Microsoft.XboxGameOverlay 

Event[7995]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T14:15:47.8240000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH10PG8-MICROSOFT.PEOPLE 

Event[7996]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T14:15:38.9600000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7997]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T14:15:38.0820000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7998]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T14:15:38.0820000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[7999]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T14:15:34.9540000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[8000]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T14:15:34.9540000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[8001]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-21T14:15:18.7700000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[8002]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-21T14:15:18.7570000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[8003]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T13:06:27.1600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[8004]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-21T12:39:21.9360000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslf81013f2
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8F04D578-58B7-4AEB-B9AD-72A1AECCE890}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8005]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T12:39:21.9120000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2460.0) - Current Channel (Broad) 

Event[8006]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T12:39:17.2740000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2460.0) - Current Channel (Broad) 

Event[8007]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-21T12:39:17.0150000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[8008]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T12:25:37.1850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[8009]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T12:25:37.1730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[8010]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T12:25:37.0690000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[8011]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T12:25:37.0610000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[8012]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T12:25:29.0810000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[8013]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T12:25:29.0730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[8014]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-21T12:25:28.9750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x3558 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[8015]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-21T12:24:44.5130000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8016]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T12:23:53.9680000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 5 to 7.

Reason InputAccelerometer 

BootId: 16 

Event[8017]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T12:02:53.5780000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[8018]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T12:01:53.8860000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason SessionUnlock 

BootId: 16 

Event[8019]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-21T12:00:07.4770000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8020]
  Log Name: System
  Source: EventLog
  Date: 2024-01-21T12:00:00.8400000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 63898 seconds. 

Event[8021]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5490000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 8584. 

Event[8022]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5490000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 8584. 

Event[8023]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5490000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[8024]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[8025]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8026]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8027]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[8028]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[8029]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[8030]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[8031]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[8032]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{d4764b5a-b7bf-11ee-8951-6245b4eb6eb6}" 

Event[8033]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[8034]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[8035]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[8036]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[8037]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[8038]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8039]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[8040]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca3-31dd-9ba 

Event[8041]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 2; device name: \Volume{234e3a45-fca3-31dd-9bac-204183070f1e}. 

Event[8042]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[8043]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca3-31dd-9bac-204183070f1e}" created 

Event[8044]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[8045]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[8046]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[8047]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[8048]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[8049]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 2l 

Event[8050]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[8051]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[8052]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-21T11:59:56.5430000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[8053]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-21T11:59:53.6930000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8054]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T11:59:32.6100000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[8055]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T11:59:30.5490000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 9 keys and creating 1 modified pages. 

Event[8056]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T11:59:30.5480000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 20 keys and creating 3 modified pages. 

Event[8057]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T11:59:30.2290000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 71 keys and creating 9 modified pages. 

Event[8058]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T11:59:24.3180000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 10 keys and creating 1 modified pages. 

Event[8059]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T11:59:24.1230000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 37 keys and creating 7 modified pages. 

Event[8060]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-21T11:59:23.5460000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[8061]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-21T11:59:22.8920000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8062]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-21T11:59:22.8890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8063]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-21T11:59:22.8870000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?20T22:37:27.552575600Z
Wake Time: ?2024?-?01?-?21T11:59:21.722234200Z

Wake Source: Unknown 

Event[8064]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T11:59:22.5650000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \Device\HarddiskVolume7\EFI\Microsoft\Boot\BCD was cleared updating 174 keys and creating 11 modified pages. 

Event[8065]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-21T11:59:22.5070000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[8066]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T11:59:22.0740000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 2 to 4.

Reason Unknown 

BootId: 16 

Event[8067]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-21T11:59:21.6600000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 2.

Reason SxTransition 

BootId: 16 

Event[8068]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T11:59:21.6590000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[8069]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T11:59:21.6590000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[8070]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-21T11:59:21.6590000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[8071]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-21T11:59:21.3950000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[8072]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-21T11:59:21.0830000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[8073]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-21T11:59:20.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?21T11:59:20.500000000Z from ?2024?-?01?-?20T22:37:34.909336800Z.
Time Delta: 48105590 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?21T11:59:20.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[8074]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T22:37:34.9090000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[8075]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T22:37:29.2700000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[8076]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T22:37:27.5550000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason ScreenOffGracePeriod 

BootId: 16 

Event[8077]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T22:37:27.5520000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[8078]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T22:37:27.2070000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[8079]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[8080]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[8081]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[8082]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[8083]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8084]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8085]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8086]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[8087]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[8088]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[8089]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[8090]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8091]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[8092]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8093]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{d4763a5b-b7bf-11ee-8951-6245b4eb6eb6}" 

Event[8094]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[8095]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[8096]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[8097]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T22:37:25.3260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[8098]
  Log Name: System
  Source: User32
  Date: 2024-01-20T22:37:20.0660000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: power off
 Comment:  

Event[8099]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T19:41:45.6490000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[8100]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T19:09:51.4100000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[8101]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T18:36:11.1440000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[8102]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:20:47.6880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[8103]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:18:57.7890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8104]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:18:18.5650000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8105]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 21104. 

Event[8106]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 21104. 

Event[8107]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[8108]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[8109]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8110]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8111]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[8112]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[8113]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[8114]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[8115]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[8116]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{d4763a5b-b7bf-11ee-8951-6245b4eb6eb6}" 

Event[8117]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[8118]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[8119]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[8120]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8121]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8122]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8123]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[8124]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[8125]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[8126]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[8127]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[8128]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[8129]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[8130]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[8131]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[8132]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[8133]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[8134]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[8135]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[8136]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:18:08.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[8137]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:18:05.3040000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8138]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:17:50.6360000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl17f48072
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D9A8B471-5EA7-430E-A30B-22FE11F6D139}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8139]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:17:22.6570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8140]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:17:19.2120000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8141]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:17:19.2080000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8142]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T18:17:19.0260000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[8143]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:17:18.1950000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/4f338408-eaf8-491a-85b2-dd0783a9fe78/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x1190 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8144]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:17:18.1940000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001020000001. Status 0x0. Process Id 0x1190 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8145]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:16:21.3370000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8146]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:16:21.3370000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8147]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:16:21.3370000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8148]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:16:21.3370000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8149]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:16:21.3370000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8150]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:16:21.3370000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8151]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:16:21.3370000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8152]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:16:21.3200000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8153]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:15:26.6820000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8154]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T18:15:24.3730000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[8155]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T18:15:24.2200000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[8156]
  Log Name: System
  Source: TPM
  Date: 2024-01-20T18:15:23.6970000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[8157]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:20.6230000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8158]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:15:19.8520000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[8159]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:15:18.7370000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[8160]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T18:15:18.0330000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[8161]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:18.0260000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x1694 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[8162]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:18.0260000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000720000001. Status 0x0. Process Id 0x1694 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[8163]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T18:15:17.9630000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[8164]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8165]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8166]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8167]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8168]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8169]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8170]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8171]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8172]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8173]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8174]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8175]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8176]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8177]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8178]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8179]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8180]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:15:17.8990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8181]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T18:15:17.1370000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[8182]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:15:17.1310000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[8183]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:17.1310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8184]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:15:17.1310000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[8185]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:15:17.1310000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[8186]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:17.1270000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8187]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:17.1230000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8188]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:17.1230000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[8189]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:17.1230000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8190]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:17.1140000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8191]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:17.1060000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8192]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:17.1020000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8193]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T18:15:16.2700000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[8194]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T18:15:16.2700000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[8195]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T18:15:16.2660000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[8196]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2580000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[8197]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2570000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[8198]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2460000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[8199]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2430000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[8200]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2290000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[8201]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2270000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[8202]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2260000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[8203]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2200000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[8204]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2100000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[8205]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.2060000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[8206]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:15:16.1890000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[8207]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T18:15:16.1670000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[8208]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T18:15:16.1670000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[8209]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-20T18:15:14.6210000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[8210]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T18:15:14.0540000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[8211]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:15:13.5700000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[8212]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:15:13.3250000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[8213]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T18:15:12.9450000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[8214]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:15:12.4790000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[8215]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:15:12.0920000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[8216]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-20T18:15:11.1280000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[8217]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T18:15:10.5120000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[8218]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:15:10.3350000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8219]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:15:10.3350000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8220]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:15:10.2720000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8221]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:15:10.2720000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8222]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:15:10.2560000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8223]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:15:10.2410000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[8224]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-20T18:15:10.2410000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[8225]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-20T18:15:10.1780000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[8226]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8227]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8228]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8229]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8230]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8231]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8232]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8233]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8234]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1720000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8235]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1720000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8236]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8237]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8238]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1550000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8239]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1550000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8240]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8241]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8242]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8243]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1450000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8244]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1440000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8245]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8246]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8247]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8248]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1400000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8249]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:15:10.1270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[8250]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T18:15:09.7030000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[8251]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T18:15:09.6920000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[8252]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:09.6650000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8253]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:09.5680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8254]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:15:09.5090000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[8255]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:04.8270000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8256]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:04.8260000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8257]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:15:04.8250000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8258]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-20T18:15:03.1220000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[8259]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T18:15:03.0770000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[8260]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:15:03.0720000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[8261]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:15:03.0720000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[8262]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:15:03.0720000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[8263]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:15:03.0720000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?20T18:15:02.000000000Z. 

Event[8264]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:15:03.0720000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[8265]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:15:03.0720000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[8266]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:15:03.0720000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[8267]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:15:03.0720000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[8268]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T18:15:03.0710000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?20T18:15:02.500000000Z. 

Event[8269]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T18:14:31.8640000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?20T18:14:31.864130700Z. 

Event[8270]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T18:14:31.6780000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[8271]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T18:14:31.2660000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Reboot 
Event Code: 0x0 
Reason: Kernel API 

Event[8272]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T18:14:27.4280000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[8273]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T18:14:27.4230000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[8274]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:14:27.2510000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[8275]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:14:27.2510000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[8276]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:14:26.6070000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00000220000001. Status 0x0. Process Id 0x1224 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8277]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:14:26.6070000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/2622f176-ad73-4a51-8458-8171716fb262/) from URL group (0xFE00000220000001). Process Id 0x1224 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8278]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T18:15:17.1870000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 14 seconds. 

Event[8279]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T18:15:17.1860000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[8280]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T18:15:17.1860000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[8281]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:14:26.2900000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[8282]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:14:26.2900000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[8283]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T18:14:26.2870000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[8284]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T18:14:26.2870000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[8285]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:14:26.2810000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[8286]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:14:26.2800000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[8287]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:14:26.2510000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[8288]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T18:14:26.2820000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[8289]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T18:14:25.1610000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[8290]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[8291]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[8292]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[8293]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[8294]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8295]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8296]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8297]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[8298]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[8299]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[8300]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[8301]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8302]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[8303]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8304]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{4437f691-b7bf-11ee-8950-086ac578260b}" 

Event[8305]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[8306]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[8307]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[8308]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:14:18.9270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[8309]
  Log Name: System
  Source: User32
  Date: 2024-01-20T18:14:17.7560000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Users\felip\Downloads\Programs\EqualizerAPO64-1.3.exe (PC-MAIN) has initiated the restart of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Application: Installation (Planned)
 Reason Code: 0x80040002
 Shut-down Type: restart
 Comment:  

Event[8310]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:13:48.4810000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsle4c3f0f0
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D9A8B471-5EA7-430E-A30B-22FE11F6D139}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8311]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:13:39.4480000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[8312]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:13:17.1090000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8313]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:13:17.1080000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8314]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:13:17.1070000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8315]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:12:19.4300000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8316]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:12:19.4300000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8317]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:12:19.4300000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8318]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:12:19.4300000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8319]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:12:19.4300000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8320]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:12:19.4300000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8321]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:12:19.4300000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8322]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:12:19.4140000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8323]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:12:10.9370000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8324]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:12:08.3920000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8325]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 30008. 

Event[8326]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 30008. 

Event[8327]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[8328]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4800000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[8329]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4800000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8330]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4800000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8331]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4800000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[8332]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4800000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[8333]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[8334]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[8335]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[8336]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{4437f691-b7bf-11ee-8950-086ac578260b}" 

Event[8337]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[8338]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[8339]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8340]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[8341]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8342]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8343]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[8344]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[8345]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[8346]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[8347]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[8348]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[8349]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[8350]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[8351]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[8352]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[8353]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[8354]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[8355]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[8356]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:12:00.4760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[8357]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:11:58.5550000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8358]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:11:35.2980000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[8359]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:34.3450000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/2622f176-ad73-4a51-8458-8171716fb262/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x1224 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8360]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:34.3450000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x1224 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8361]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:11:33.3440000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8362]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:11:33.3420000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8363]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T18:11:33.1580000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[8364]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:11:24.6300000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8365]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T18:11:22.3830000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[8366]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T18:11:22.2490000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[8367]
  Log Name: System
  Source: TPM
  Date: 2024-01-20T18:11:21.6970000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[8368]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:18.5680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8369]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-20T18:11:18.1940000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service FocusriteUsbAudio for Device Instance ID FOCUSRITEUSB\AUDIO&ADAPTER\1&35837345&0& with the following status: 0. 

Event[8370]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:11:17.4760000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[8371]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:11:16.3850000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Focusrite USB Driver
Service File Name:  \SystemRoot\System32\drivers\FocusriteUsb.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8372]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:11:16.2340000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[8373]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T18:11:15.9060000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[8374]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.8930000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x1644 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[8375]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.8920000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000E20000001. Status 0x0. Process Id 0x1644 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[8376]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T18:11:15.8350000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[8377]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8378]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8379]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8380]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8381]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8382]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8383]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8384]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8385]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8386]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8387]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8388]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8389]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8390]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8391]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8392]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8393]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:11:15.7700000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8394]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T18:11:14.9930000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[8395]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:11:14.9880000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[8396]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:11:14.9880000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[8397]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:11:14.9880000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[8398]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:14.9870000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8399]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:14.9830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8400]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:14.9780000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8401]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:14.9780000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[8402]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:14.9780000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8403]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:14.9730000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8404]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:14.9630000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8405]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:14.9590000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8406]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T18:11:14.1890000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[8407]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T18:11:14.1890000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[8408]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T18:11:14.1840000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[8409]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1770000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[8410]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1760000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[8411]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1650000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[8412]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1620000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[8413]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1480000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[8414]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1470000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[8415]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1450000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[8416]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1400000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[8417]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1300000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[8418]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1260000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[8419]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T18:11:14.1080000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[8420]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T18:11:14.0860000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[8421]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T18:11:14.0860000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[8422]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-20T18:11:12.5180000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[8423]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T18:11:11.9700000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[8424]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:11:11.4810000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[8425]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:11:11.2390000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[8426]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T18:11:11.0490000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[8427]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:11:10.4030000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[8428]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:11:10.0250000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[8429]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-20T18:11:09.4190000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[8430]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T18:11:08.6060000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[8431]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:11:08.4290000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8432]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:11:08.4290000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8433]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:11:08.3660000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8434]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:11:08.3660000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8435]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:11:08.3500000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8436]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T18:11:08.3350000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[8437]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-20T18:11:08.3350000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[8438]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-20T18:11:08.2720000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[8439]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8440]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8441]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8442]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8443]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8444]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8445]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8446]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2720000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8447]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8448]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8449]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8450]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2590000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8451]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8452]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8453]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8454]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2450000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8455]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8456]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8457]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2390000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8458]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8459]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8460]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2360000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8461]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2350000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8462]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:11:08.2210000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[8463]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T18:11:07.7990000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[8464]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T18:11:07.7880000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[8465]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:07.7590000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8466]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:07.6630000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8467]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T18:11:07.6050000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[8468]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:02.8850000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8469]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:02.8840000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8470]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T18:11:02.8830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8471]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-20T18:11:01.1340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[8472]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T18:11:01.0790000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[8473]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:11:01.0730000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[8474]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:11:01.0730000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[8475]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:11:01.0730000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[8476]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:11:01.0730000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?20T18:11:00.000000000Z. 

Event[8477]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:11:01.0730000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[8478]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:11:01.0730000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[8479]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:11:01.0730000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[8480]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T18:11:01.0730000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[8481]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T18:11:01.0730000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?20T18:11:00.500000000Z. 

Event[8482]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T18:10:30.5570000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?20T18:10:30.557303800Z. 

Event[8483]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T18:10:30.3730000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[8484]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T18:10:29.9660000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Reboot 
Event Code: 0x0 
Reason: Kernel API 

Event[8485]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T18:10:26.1250000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[8486]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T18:10:26.1140000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[8487]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:10:25.9480000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[8488]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:10:25.9480000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[8489]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:10:25.3670000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00000E20000001. Status 0x0. Process Id 0x128C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8490]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:10:25.3660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/1d1d36be-c840-42ee-a572-b18e5864ff97/) from URL group (0xFE00000E20000001). Process Id 0x128C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8491]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T18:11:15.0420000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 14 seconds. 

Event[8492]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T18:11:15.0420000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[8493]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T18:11:15.0410000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[8494]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:10:24.9880000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[8495]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T18:10:24.9870000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[8496]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T18:10:24.9870000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[8497]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:10:24.9850000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[8498]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:10:24.9780000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[8499]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T18:10:24.9780000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[8500]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:10:24.9470000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[8501]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T18:10:24.7480000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[8502]
  Log Name: System
  Source: User32
  Date: 2024-01-20T18:10:24.7480000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The process C:\WINDOWS\system32\winlogon.exe (PC-MAIN) has initiated the restart of computer PC-MAIN on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
 Reason Code: 0x500ff
 Shut-down Type: restart
 Comment:  

Event[8503]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T18:10:24.9820000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[8504]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[8505]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[8506]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[8507]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[8508]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8509]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8510]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8511]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[8512]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[8513]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[8514]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[8515]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8516]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[8517]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8518]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{a3950c21-b7bd-11ee-894f-6245b4eb6eb6}" 

Event[8519]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[8520]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[8521]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[8522]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:10:23.8960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[8523]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:10:23.8270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. 

Event[8524]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:10:21.8820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. 

Event[8525]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:10:21.8750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. 

Event[8526]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:10:21.8680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. 

Event[8527]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:10:21.8170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} did not register with DCOM within the required timeout. 

Event[8528]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:10:21.7940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The server {08728914-3F57-4D52-9E31-49DAECA5A80A} did not register with DCOM within the required timeout. 

Event[8529]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:10:02.0700000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl68561093
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D9A8B471-5EA7-430E-A30B-22FE11F6D139}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8530]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T18:10:02.0400000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2423.0) - Current Channel (Broad) 

Event[8531]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:09:58.7240000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite Thunderbolt Audio Root service was changed from disabled to demand start. 

Event[8532]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:09:58.4490000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite USB Audio Root service was changed from disabled to demand start. 

Event[8533]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T18:09:57.4690000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2423.0) - Current Channel (Broad) 

Event[8534]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:09:56.4640000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite Thunderbolt Audio Root service was changed from demand start to disabled. 

Event[8535]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:09:56.4600000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite USB Audio Root service was changed from demand start to disabled. 

Event[8536]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-20T18:09:56.0810000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Program Files\Focusrite\Drivers\Focusrite Notifier.exe with process id 9084 stopped the removal or ejection for the device ROOT\FOCUSRITE_AUDIO\0001.
Process command line: "C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe"
List of affected devices:
ROOT\FOCUSRITE_AUDIO\0001
 

Event[8537]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T18:09:52.7330000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[8538]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-20T18:09:51.0400000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Program Files\Focusrite\Drivers\Focusrite Notifier.exe with process id 9084 stopped the removal or ejection for the device ROOT\FOCUSRITE_AUDIO\0000.
Process command line: "C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe"
List of affected devices:
ROOT\FOCUSRITE_AUDIO\0000
 

Event[8539]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:08:47.2790000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite Thunderbolt Audio Root service was changed from disabled to demand start. 

Event[8540]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:08:47.0320000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite USB Audio Root service was changed from disabled to demand start. 

Event[8541]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:07:10.0010000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite Thunderbolt Audio Root service was changed from demand start to disabled. 

Event[8542]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:07:09.9990000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite USB Audio Root service was changed from demand start to disabled. 

Event[8543]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:07:09.9660000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite USB Driver service was changed from demand start to disabled. 

Event[8544]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T18:02:15.6370000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslae71e595
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FE665A5C-FD21-49E5-ABA0-81E1F7CC41AC}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8545]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:01:44.2310000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8546]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:01:44.2310000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8547]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:01:44.2310000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8548]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:00:49.8220000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8549]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 12696. 

Event[8550]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 12696. 

Event[8551]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[8552]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[8553]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8554]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8555]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[8556]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9530000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[8557]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[8558]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[8559]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[8560]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{a3950c21-b7bd-11ee-894f-6245b4eb6eb6}" 

Event[8561]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[8562]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[8563]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8564]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[8565]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8566]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8567]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[8568]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[8569]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[8570]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[8571]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[8572]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[8573]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[8574]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[8575]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[8576]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[8577]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[8578]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[8579]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[8580]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T18:00:40.9500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[8581]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:00:39.8830000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8582]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:00:39.8830000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8583]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:00:39.8830000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8584]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:00:39.8830000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8585]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:00:39.8670000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8586]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:00:39.8670000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8587]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:00:39.8670000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8588]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T18:00:39.8670000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8589]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:00:35.3600000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8590]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:00:16.9640000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8591]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:00:06.6170000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/1d1d36be-c840-42ee-a572-b18e5864ff97/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x128C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8592]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T18:00:06.6170000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000E20000001. Status 0x0. Process Id 0x128C Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8593]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:00:05.9630000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8594]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T18:00:05.9610000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8595]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T18:00:05.7820000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[8596]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:59:52.6150000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8597]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:44.9580000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8598]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T17:59:44.5600000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[8599]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T17:59:44.4210000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[8600]
  Log Name: System
  Source: TPM
  Date: 2024-01-20T17:59:43.3520000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[8601]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:59:43.3510000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[8602]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.2010000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000B20000001). Status: 0x0. Process Id 0x16C4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[8603]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.2010000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000B20000001. Status 0x0. Process Id 0x16C4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[8604]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:59:43.1790000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[8605]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:59:43.1320000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[8606]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8607]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8608]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8609]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8610]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8611]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8612]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8613]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8614]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8615]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8616]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8617]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8618]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8619]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8620]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8621]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8622]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:59:43.0840000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8623]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T17:59:42.2390000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[8624]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:59:42.2330000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[8625]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:59:42.2330000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[8626]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:59:42.2330000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[8627]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:42.2200000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8628]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:42.2160000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8629]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:42.2120000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8630]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:42.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[8631]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:42.2120000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8632]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:42.2050000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8633]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:42.1970000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8634]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:42.1930000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8635]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T17:59:41.1640000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[8636]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T17:59:41.1640000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[8637]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T17:59:41.1590000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[8638]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.1510000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[8639]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.1500000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[8640]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.1390000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[8641]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.1360000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[8642]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.1230000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[8643]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.1210000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[8644]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.1190000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[8645]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.1140000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[8646]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.1030000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[8647]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.0990000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[8648]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:59:41.0820000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[8649]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T17:59:41.0590000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[8650]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T17:59:41.0590000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[8651]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-20T17:59:39.4850000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[8652]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:59:38.9560000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[8653]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:59:38.4650000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[8654]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:59:38.2260000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[8655]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:59:37.2330000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[8656]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:59:35.9560000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[8657]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T17:59:31.5880000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[8658]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:59:30.7060000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[8659]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-20T17:59:29.3590000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[8660]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T17:59:29.0710000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[8661]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:59:28.8810000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8662]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:59:28.8810000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8663]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:59:28.8180000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8664]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:59:28.8180000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8665]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:59:28.8030000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8666]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:59:28.7870000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[8667]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-20T17:59:28.7870000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[8668]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-20T17:59:28.7250000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[8669]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8670]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7330000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8671]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7320000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8672]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7310000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8673]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7250000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8674]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8675]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7230000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8676]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7220000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8677]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8678]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8679]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7110000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8680]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7100000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8681]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8682]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.7030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8683]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8684]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8685]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8686]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8687]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8688]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8689]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8690]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8691]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8692]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:59:28.6730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[8693]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:59:28.3590000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[8694]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:59:28.3480000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[8695]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:28.3210000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8696]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:28.2250000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8697]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:59:28.1700000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[8698]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:23.5550000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8699]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:23.5540000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8700]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:59:23.5530000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8701]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-20T17:59:22.1440000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[8702]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:59:22.0960000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[8703]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:59:22.0910000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[8704]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:59:22.0910000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[8705]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:59:22.0910000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[8706]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:59:22.0910000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?20T17:59:20.000000000Z. 

Event[8707]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:59:22.0900000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[8708]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:59:22.0900000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[8709]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:59:22.0900000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[8710]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:59:22.0900000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[8711]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:59:22.0900000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?20T17:59:21.500000000Z. 

Event[8712]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:58:50.3890000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?20T17:58:50.389763400Z. 

Event[8713]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:58:50.2140000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[8714]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:58:49.6920000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Reboot 
Event Code: 0x0 
Reason: Kernel API 

Event[8715]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:58:45.8470000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[8716]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:58:45.8420000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[8717]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:58:45.6780000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[8718]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:58:45.6780000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[8719]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:58:45.1630000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00000820000001. Status 0x0. Process Id 0x1480 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8720]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:58:45.1630000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/4e4a94c0-99b5-462c-8d0c-b8f61c7039de/) from URL group (0xFE00000820000001). Process Id 0x1480 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8721]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:59:42.2770000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 20 seconds. 

Event[8722]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:59:42.2770000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[8723]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:59:42.2770000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[8724]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:58:44.7150000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[8725]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:58:44.7150000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[8726]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T17:58:44.7130000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[8727]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T17:58:44.7130000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[8728]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:58:44.7090000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[8729]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:58:44.7090000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[8730]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:58:44.6760000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[8731]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:58:44.7090000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[8732]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T17:58:43.5850000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[8733]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[8734]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[8735]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[8736]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[8737]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8738]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8739]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8740]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[8741]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[8742]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[8743]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[8744]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8745]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[8746]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8747]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{8b70b64d-b7bc-11ee-894e-6245b4eb6eb6}" 

Event[8748]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[8749]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[8750]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[8751]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:58:41.8720000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[8752]
  Log Name: System
  Source: User32
  Date: 2024-01-20T17:58:36.6390000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Users\felip\Downloads\Programs\EqualizerAPO64-1.3.exe (PC-MAIN) has initiated the restart of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Application: Installation (Planned)
 Reason Code: 0x80040002
 Shut-down Type: restart
 Comment:  

Event[8753]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:57:20.9840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[8754]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:54:23.8310000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl87caae00
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FE665A5C-FD21-49E5-ABA0-81E1F7CC41AC}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8755]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:53:52.4300000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8756]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:53:52.4290000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8757]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:53:52.4290000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8758]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:53:52.2030000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8759]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 26860. 

Event[8760]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 26860. 

Event[8761]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[8762]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[8763]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8764]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8765]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[8766]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[8767]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[8768]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[8769]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[8770]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{8b70b64d-b7bc-11ee-894e-6245b4eb6eb6}" 

Event[8771]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[8772]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[8773]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8774]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[8775]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8776]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8777]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[8778]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[8779]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[8780]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[8781]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[8782]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[8783]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[8784]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[8785]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[8786]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[8787]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[8788]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[8789]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[8790]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:53:42.3110000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[8791]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:53:41.8740000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8792]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:53:38.0400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8793]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:53:05.5080000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/4e4a94c0-99b5-462c-8d0c-b8f61c7039de/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x1480 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8794]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:53:05.5080000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000820000001. Status 0x0. Process Id 0x1480 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8795]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:53:05.2190000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8796]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:53:05.2170000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8797]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T17:53:05.0480000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[8798]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:52:49.8570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8799]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:52:49.8570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8800]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:52:49.8570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8801]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:52:49.8570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8802]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:52:49.8420000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8803]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:52:49.8420000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8804]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:52:49.8420000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8805]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:52:49.8420000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8806]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:52:00.6320000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8807]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T17:51:53.4720000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[8808]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T17:51:53.2910000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[8809]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:53.1790000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8810]
  Log Name: System
  Source: TPM
  Date: 2024-01-20T17:51:52.7020000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[8811]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:51:51.5460000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[8812]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.4110000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[8813]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.4110000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001720000001. Status 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[8814]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:51:51.3700000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[8815]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:51:51.3220000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[8816]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8817]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8818]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8819]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8820]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8821]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8822]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8823]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8824]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8825]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8826]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8827]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8828]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8829]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8830]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8831]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8832]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:51:51.2730000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[8833]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T17:51:50.4260000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[8834]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:51:50.4200000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[8835]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:51:50.4200000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[8836]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:51:50.4200000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[8837]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:50.4090000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8838]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:50.4050000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8839]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:50.4000000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8840]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:50.4000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[8841]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:50.4000000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8842]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:50.3950000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8843]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:50.3860000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8844]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:50.3820000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8845]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T17:51:49.7720000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[8846]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T17:51:49.7720000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[8847]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T17:51:49.7670000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[8848]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7590000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[8849]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7580000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[8850]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7470000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[8851]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7440000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[8852]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7300000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[8853]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7280000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[8854]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7260000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[8855]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7210000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[8856]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7110000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[8857]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.7070000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[8858]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:51:49.6890000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[8859]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T17:51:49.6670000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[8860]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T17:51:49.6670000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[8861]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:51:48.5510000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[8862]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-20T17:51:48.1530000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[8863]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:51:47.6310000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[8864]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:51:47.1450000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[8865]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:51:46.9040000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[8866]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:51:46.0450000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[8867]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T17:51:41.4810000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[8868]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:51:40.6390000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[8869]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-20T17:51:39.6120000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[8870]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T17:51:39.0140000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[8871]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:51:38.8410000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8872]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:51:38.8410000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8873]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:51:38.7780000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8874]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:51:38.7780000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8875]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:51:38.7620000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[8876]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:51:38.7470000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[8877]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-20T17:51:38.7470000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[8878]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-20T17:51:38.7000000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[8879]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.7040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8880]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.7030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8881]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.7020000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8882]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.7010000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8883]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8884]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8885]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8886]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[8887]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8888]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8889]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8890]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8891]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8892]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8893]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8894]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8895]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8896]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8897]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8898]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8899]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6640000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8900]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6630000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8901]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6620000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[8902]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:51:38.6490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[8903]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:51:38.3340000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[8904]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:51:38.3230000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[8905]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:38.2960000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8906]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:38.1990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8907]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:51:38.1420000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[8908]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:33.5150000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8909]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:33.5140000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8910]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:51:33.5130000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[8911]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-20T17:51:32.1340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[8912]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:51:32.0880000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[8913]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:51:32.0830000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[8914]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:51:32.0830000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[8915]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:51:32.0830000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[8916]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:51:32.0830000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?20T17:51:30.000000000Z. 

Event[8917]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:51:32.0830000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[8918]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:51:32.0830000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[8919]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:51:32.0830000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[8920]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:51:32.0830000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[8921]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:51:32.0830000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?20T17:51:31.500000000Z. 

Event[8922]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:51:00.8120000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?20T17:51:00.812075200Z. 

Event[8923]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:51:00.6240000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[8924]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:51:00.2150000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Reboot 
Event Code: 0x0 
Reason: Kernel API 

Event[8925]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:50:56.3690000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[8926]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:50:56.3640000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[8927]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:50:56.1990000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[8928]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:50:56.1990000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[8929]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:50:55.6230000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00001620000001. Status 0x0. Process Id 0x1464 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8930]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:50:55.6220000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/94aecc6a-7083-4a5f-9606-1bf49b4265cb/) from URL group (0xFE00001620000001). Process Id 0x1464 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[8931]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:51:50.4670000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 18 seconds. 

Event[8932]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:51:50.4670000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[8933]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:51:50.4670000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[8934]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:50:55.2350000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[8935]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T17:50:55.2290000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[8936]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T17:50:55.2290000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[8937]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:50:55.2290000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[8938]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:50:55.2250000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[8939]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:50:55.2250000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[8940]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:50:55.1980000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[8941]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:50:55.2280000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[8942]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T17:50:54.1070000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[8943]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[8944]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[8945]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[8946]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[8947]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8948]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8949]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8950]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[8951]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[8952]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[8953]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[8954]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8955]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[8956]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[8957]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{b9092ee7-b7bb-11ee-894d-086ac578260b}" 

Event[8958]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[8959]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[8960]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[8961]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:50:47.8280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[8962]
  Log Name: System
  Source: User32
  Date: 2024-01-20T17:50:47.2700000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Program Files\EqualizerAPO\Configurator.exe (PC-MAIN) has initiated the restart of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Application: Maintenance (Unplanned)
 Reason Code: 0x40001
 Shut-down Type: restart
 Comment:  

Event[8963]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:48:26.2850000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl002acf17
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FE665A5C-FD21-49E5-ABA0-81E1F7CC41AC}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[8964]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:47:55.5550000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8965]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:47:55.5540000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8966]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:47:55.5540000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8967]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:47:40.4930000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8968]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:46:57.3730000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8969]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:46:57.3570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8970]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:46:57.3570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8971]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:46:57.3570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8972]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:46:57.3570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8973]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:46:57.3570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8974]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:46:57.3570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8975]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:46:57.3570000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[8976]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:46:37.2570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[8977]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 27216. 

Event[8978]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 27216. 

Event[8979]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[8980]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[8981]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8982]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[8983]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[8984]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[8985]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[8986]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[8987]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[8988]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{b9092ee7-b7bb-11ee-894d-086ac578260b}" 

Event[8989]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[8990]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[8991]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[8992]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8993]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[8994]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[8995]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[8996]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[8997]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[8998]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[8999]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[9000]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[9001]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[9002]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[9003]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[9004]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[9005]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[9006]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[9007]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[9008]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:46:28.1310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[9009]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:46:25.1980000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9010]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:46:03.3350000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/94aecc6a-7083-4a5f-9606-1bf49b4265cb/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x1464 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9011]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:46:03.3350000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001620000001. Status 0x0. Process Id 0x1464 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9012]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:46:02.6120000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9013]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:46:02.2730000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9014]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:46:02.2710000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9015]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T17:46:02.0870000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[9016]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T17:46:00.3440000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[9017]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T17:46:00.1910000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[9018]
  Log Name: System
  Source: TPM
  Date: 2024-01-20T17:45:59.6890000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[9019]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:55.3300000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9020]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:45:54.4810000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[9021]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:45:54.4180000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[9022]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.7030000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x16A4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[9023]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.7030000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000E20000001. Status 0x0. Process Id 0x16A4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[9024]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:45:53.6600000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[9025]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9026]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9027]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9028]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9029]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9030]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9031]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9032]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9033]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9034]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9035]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9036]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9037]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9038]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9039]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9040]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9041]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:45:53.5990000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9042]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T17:45:52.8110000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[9043]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:45:52.8060000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[9044]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:45:52.8060000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[9045]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:45:52.8060000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[9046]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:52.7750000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9047]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:52.7730000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9048]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:52.7680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9049]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:52.7680000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[9050]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:52.7680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9051]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:52.7640000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9052]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:52.7570000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9053]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:52.7520000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9054]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:45:52.4950000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[9055]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T17:45:52.2790000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[9056]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T17:45:52.2790000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[9057]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T17:45:52.2740000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[9058]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2670000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[9059]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2660000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[9060]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2550000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[9061]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2530000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[9062]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2390000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[9063]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2370000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[9064]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2350000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[9065]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2300000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[9066]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2200000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[9067]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.2160000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[9068]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T17:45:52.1990000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[9069]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T17:45:52.1760000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[9070]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T17:45:52.1760000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[9071]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-20T17:45:50.6070000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[9072]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:45:50.0470000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[9073]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:45:49.5610000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[9074]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:45:49.3100000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[9075]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T17:45:49.0110000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[9076]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:45:48.4640000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[9077]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:45:47.9980000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[9078]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-20T17:45:47.3330000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[9079]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T17:45:46.5300000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[9080]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:45:46.3560000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9081]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:45:46.3560000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9082]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:45:46.2930000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9083]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:45:46.2930000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9084]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:45:46.2780000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9085]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T17:45:46.2620000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[9086]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-20T17:45:46.2620000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[9087]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-20T17:45:46.2150000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[9088]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.2160000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9089]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.2140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9090]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.2130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9091]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.2120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9092]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.2060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[9093]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.2050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[9094]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.2040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9095]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.2030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9096]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9097]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1960000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9098]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9099]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9100]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9101]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9102]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9103]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9104]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9105]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9106]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9107]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9108]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9109]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9110]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9111]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T17:45:46.1640000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[9112]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:45:45.7420000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[9113]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:45:45.7300000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[9114]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:45.7020000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9115]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:45.6070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9116]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T17:45:45.5480000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[9117]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:40.8690000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9118]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:40.8680000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9119]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T17:45:40.8670000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9120]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-20T17:45:39.1150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[9121]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:45:39.0760000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[9122]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:45:39.0710000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[9123]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:45:39.0710000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[9124]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:45:39.0710000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[9125]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:45:39.0710000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?20T17:45:38.000000000Z. 

Event[9126]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:45:39.0710000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[9127]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:45:39.0710000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[9128]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:45:39.0710000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[9129]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T17:45:39.0710000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[9130]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:45:39.0710000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?20T17:45:38.500000000Z. 

Event[9131]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:45:08.2850000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?20T17:45:08.285741700Z. 

Event[9132]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:45:07.9420000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[9133]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T17:44:59.1920000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Reboot 
Event Code: 0x0 
Reason: Kernel API 

Event[9134]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:44:55.3250000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[9135]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T17:44:55.3200000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[9136]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:44:55.1780000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[9137]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:44:55.1780000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[9138]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:44:54.6970000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00001620000001. Status 0x0. Process Id 0x15C0 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9139]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:44:54.6970000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/7cafd47d-6abb-408b-8ce7-0280655e5757/) from URL group (0xFE00001620000001). Process Id 0x15C0 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9140]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:45:52.8310000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 14 seconds. 

Event[9141]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:45:52.8300000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[9142]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:45:52.8300000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[9143]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:44:54.2120000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[9144]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T17:44:54.2120000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[9145]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T17:44:54.2120000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[9146]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:44:54.2110000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[9147]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:44:54.2090000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[9148]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T17:44:54.2090000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[9149]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:44:54.1770000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[9150]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T17:44:54.2120000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[9151]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T17:44:53.0820000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[9152]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[9153]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[9154]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[9155]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[9156]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9157]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9158]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[9159]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[9160]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[9161]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[9162]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[9163]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[9164]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[9165]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[9166]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{64e65602-b78b-11ee-894b-086ac578260b}" 

Event[9167]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[9168]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[9169]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[9170]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:44:47.0930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[9171]
  Log Name: System
  Source: User32
  Date: 2024-01-20T17:44:46.5230000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Program Files\EqualizerAPO\Configurator.exe (PC-MAIN) has initiated the restart of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Application: Maintenance (Unplanned)
 Reason Code: 0x40001
 Shut-down Type: restart
 Comment:  

Event[9172]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:35:53.6290000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9173]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-20T17:35:00.6320000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service NVHDA for Device Instance ID HDAUDIO\FUNC_01&VEN_10DE&DEV_009A&SUBSYS_14623896&REV_1001\5&3B380550&0&0001 with the following status: 0. 

Event[9174]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:34:57.2190000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9175]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-20T17:34:55.5710000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service NVDisplay.ContainerLocalSystem for Device Instance ID PCI\VEN_10DE&DEV_2208&SUBSYS_38961462&REV_A1\4&22F77229&0&0008 with the following status: 0. 

Event[9176]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-20T17:34:55.0040000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service nvlddmkm for Device Instance ID PCI\VEN_10DE&DEV_2208&SUBSYS_38961462&REV_A1\4&22F77229&0&0008 with the following status: 0. 

Event[9177]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:34:54.4850000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The NVIDIA LocalSystem Container service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 6000 milliseconds: Restart the service. 

Event[9178]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:34:54.4850000Z
  Event ID: 7023
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The NVIDIA LocalSystem Container service terminated with the following error: 
A generic command executable returned a result that indicates failure. 

Event[9179]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:19:31.8330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001620000001). Process Id 0x6A0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9180]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:19:31.8240000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9181]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:17:23.9400000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001620000001). Status: 0x0. Process Id 0x6A0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9182]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:17:23.9350000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000002). Process Id 0x6A0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9183]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:17:23.8390000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0x0. Process Id 0x6A0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9184]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:17:23.8330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x6A0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9185]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:17:04.6820000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x6A0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9186]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:17:04.6770000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000920000001). Process Id 0x6A0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9187]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T17:16:59.7860000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000920000001). Status: 0x0. Process Id 0x6A0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9188]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T17:16:55.6740000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9189]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:15:42.9340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[9190]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:14:44.9470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9191]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:14:28.3790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9192]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:19.9650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[9193]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T17:14:18.7260000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9194]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 26540. 

Event[9195]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 26540. 

Event[9196]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[9197]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[9198]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[9199]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[9200]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6330000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[9201]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6330000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[9202]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[9203]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[9204]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[9205]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{64e65602-b78b-11ee-894b-086ac578260b}" 

Event[9206]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[9207]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[9208]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9209]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[9210]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9211]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[9212]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[9213]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[9214]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[9215]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[9216]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[9217]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[9218]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[9219]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[9220]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[9221]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[9222]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[9223]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[9224]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[9225]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T17:14:17.6290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[9226]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:14:14.1940000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9227]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:13:42.6450000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9228]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T17:13:42.6430000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9229]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T17:13:42.4420000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[9230]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-20T15:38:29.3630000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9231]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-20T15:21:25.3600000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9232]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-20T15:04:21.3570000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9233]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-20T14:47:17.3550000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9234]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T14:33:24.9000000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9235]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T14:31:20.7150000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9236]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-20T14:29:57.3550000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[9237]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-20T14:29:57.3430000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9238]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T14:29:56.3560000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2416.0) - Current Channel (Broad) 

Event[9239]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T14:29:56.3490000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsla8a657a6
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FE665A5C-FD21-49E5-ABA0-81E1F7CC41AC}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9240]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T14:29:52.3840000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2416.0) - Current Channel (Broad) 

Event[9241]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T14:29:52.3840000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9242]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T14:22:17.0010000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl5e28592c
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3241EC7D-1E0D-4DE3-9EF0-EE700F0250FC}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9243]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T14:21:45.5970000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9244]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:21:44.4570000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/7cafd47d-6abb-408b-8ce7-0280655e5757/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x15C0 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9245]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:21:44.4560000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001620000001. Status 0x0. Process Id 0x15C0 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9246]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:20:45.1860000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9247]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:20:45.1860000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9248]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:20:45.1860000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9249]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:20:45.1860000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9250]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:20:45.1690000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9251]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:20:45.1690000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9252]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:20:45.1690000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9253]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:20:45.1690000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9254]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T14:19:53.5370000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9255]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T14:19:48.4070000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[9256]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T14:19:48.2650000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[9257]
  Log Name: System
  Source: TPM
  Date: 2024-01-20T14:19:47.7170000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[9258]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:45.9310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9259]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T14:19:44.4480000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[9260]
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2024-01-20T14:19:44.4350000Z
  Event ID: 1
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: WHEA Error Event Logs, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event. 

Event[9261]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.3150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x181C Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[9262]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.3150000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000820000001. Status 0x0. Process Id 0x181C Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[9263]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T14:19:44.2820000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[9264]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T14:19:44.2370000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[9265]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9266]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9267]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9268]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9269]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9270]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9271]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9272]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9273]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9274]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9275]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9276]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9277]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9278]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9279]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9280]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9281]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T14:19:44.1920000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9282]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T14:19:43.0460000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[9283]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T14:19:43.0380000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[9284]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T14:19:43.0380000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[9285]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T14:19:43.0380000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[9286]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:43.0040000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9287]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:43.0000000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9288]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:42.9960000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9289]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:42.9960000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[9290]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:42.9960000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9291]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:42.9920000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9292]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:42.9830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9293]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:42.9790000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9294]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T14:19:42.6300000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[9295]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T14:19:42.6300000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[9296]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T14:19:42.6270000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[9297]
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-01-20T14:19:42.6260000Z
  Event ID: 1001
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000101 (0x0000000000000008, 0x0000000000000000, 0xffffbd00dab59180, 0x0000000000000004). A dump was saved in: C:\WINDOWS\Minidump\012024-16187-01.dmp. Report Id: cc591b78-e97f-4264-b88b-57cf4a987273. 

Event[9298]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.6190000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[9299]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.6190000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[9300]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.6090000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[9301]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.6060000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[9302]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.5930000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[9303]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.5920000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[9304]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.5900000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[9305]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.5840000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[9306]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.5730000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[9307]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.5690000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[9308]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T14:19:42.5580000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[9309]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T14:19:42.5340000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[9310]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T14:19:42.5340000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[9311]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-20T14:19:41.0100000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[9312]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T14:19:40.6440000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[9313]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T14:19:40.1280000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[9314]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T14:19:39.7740000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[9315]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T14:19:38.6300000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[9316]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T14:19:37.4260000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[9317]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T14:19:36.9970000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[9318]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T14:19:36.7830000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[9319]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-20T14:19:36.0050000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[9320]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T14:19:34.3420000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[9321]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T14:19:34.1680000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9322]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T14:19:34.1680000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9323]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T14:19:34.1050000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9324]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T14:19:34.1050000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9325]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T14:19:34.0900000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9326]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T14:19:34.0740000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[9327]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-20T14:19:34.0740000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[9328]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-20T14:19:34.0270000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[9329]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0320000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9330]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0310000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9331]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0300000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9332]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0290000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9333]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0220000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9334]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0210000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9335]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0200000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9336]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9337]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9338]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9339]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9340]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9341]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9342]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:34.0030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9343]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9344]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9345]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9346]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9347]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9348]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9349]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9350]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[9351]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9870000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9352]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T14:19:33.9740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[9353]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T14:19:33.6630000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[9354]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T14:19:33.6520000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[9355]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T14:19:33.6500000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[9356]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:33.6240000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9357]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:33.5290000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9358]
  Log Name: System
  Source: volmgr
  Date: 2024-01-20T14:19:33.4920000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[9359]
  Log Name: System
  Source: volmgr
  Date: 2024-01-20T14:19:33.4920000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[9360]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T14:19:33.4620000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[9361]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:28.5870000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9362]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:28.5860000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9363]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T14:19:28.5850000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9364]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T14:19:43.1270000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 16 seconds. 

Event[9365]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T14:19:43.1260000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[9366]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T14:19:43.1260000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[9367]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T14:19:43.1260000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 13:59:59 on ?20/?01/?2024 was unexpected. 

Event[9368]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-20T14:19:27.1450000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[9369]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T14:19:27.0880000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[9370]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T14:19:27.0830000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[9371]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T14:19:27.0830000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[9372]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T14:19:27.0830000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[9373]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T14:19:27.0830000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?20T14:19:25.000000000Z. 

Event[9374]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T14:19:27.0830000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[9375]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T14:19:27.0820000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[9376]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T14:19:27.0820000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[9377]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T14:19:27.0820000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[9378]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T14:19:27.0820000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?20T14:19:26.500000000Z. 

Event[9379]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T12:30:29.9660000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\cb68a5e627a2c7e4_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9380]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T12:30:29.9260000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 7 keys and creating 2 modified pages. 

Event[9381]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T12:20:56.6210000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS 

Event[9382]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T12:20:55.2730000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS 

Event[9383]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T12:20:53.8680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_16005.14326.21786.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[9384]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T12:20:49.7180000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NCBCSZSJRSB-SpotifyAB.SpotifyMusic. 

Event[9385]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T12:20:49.5530000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NCBCSZSJRSB-SpotifyAB.SpotifyMusic 

Event[9386]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T12:20:48.3480000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\SpotifyAB.SpotifyMusic_1.229.605.0_x64__zpdnekdrzrea0\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[9387]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T12:20:22.0090000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9388]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T12:20:22.0090000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9389]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T12:20:17.4390000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[9390]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T12:13:27.7910000Z
  Event ID: 7034
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The EaseUS UPDATE SERVICE service terminated unexpectedly. It has done this 1 time(s). 

Event[9391]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T12:10:32.4610000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl0a19fe67
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3241EC7D-1E0D-4DE3-9EF0-EE700F0250FC}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9392]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T12:10:32.4290000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2411.0) - Current Channel (Broad) 

Event[9393]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T12:10:27.6880000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2411.0) - Current Channel (Broad) 

Event[9394]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-20T12:10:15.3990000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9395]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:08:47.6910000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000002). Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9396]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T12:08:47.6810000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9397]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:43.7930000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000002). Status: 0x0. Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9398]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:43.7880000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9399]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:43.6940000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9400]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:43.6890000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9401]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:39.6820000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9402]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:39.6710000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00001520000001). Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9403]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:39.5670000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00001520000001). Status: 0x0. Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9404]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:39.5620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000001). Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9405]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:28.3650000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9406]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:28.3490000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9407]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:06:23.4880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x1D60 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9408]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T12:06:19.3410000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9409]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T12:05:28.8030000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9410]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T12:03:23.0600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[9411]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T12:02:36.1110000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl20fe9e84
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8D83BB8E-2369-492E-BA20-6171F9AB4BE8}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9412]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:02:16.7500000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/38d3adbf-801e-49ae-b09b-19513eb1ea86/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x1478 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9413]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:02:16.7500000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001520000001. Status 0x0. Process Id 0x1478 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9414]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T12:02:05.2140000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9415]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T12:02:05.2140000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9416]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T12:02:05.2120000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9417]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T12:02:00.2780000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9418]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:50.8070000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[9419]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25840. 

Event[9420]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25840. 

Event[9421]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[9422]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[9423]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[9424]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[9425]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[9426]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[9427]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[9428]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[9429]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[9430]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{64e65602-b78b-11ee-894b-086ac578260b}" 

Event[9431]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[9432]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[9433]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9434]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[9435]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9436]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[9437]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[9438]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[9439]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[9440]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[9441]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[9442]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[9443]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[9444]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[9445]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[9446]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[9447]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[9448]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[9449]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[9450]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T12:01:48.5210000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[9451]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T12:01:42.9340000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9452]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T12:01:14.1020000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\d0fa7d747c2340b8_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9453]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T12:01:09.1210000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\a16c2b3b921ff8c9_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9454]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T12:01:08.1380000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9455]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T12:01:08.1360000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9456]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T12:01:07.8950000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[9457]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T12:01:00.2950000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9458]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T12:01:00.2950000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9459]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T12:01:00.2950000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9460]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T12:01:00.2940000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9461]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T12:01:00.2940000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9462]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T12:01:00.2940000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9463]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T12:01:00.2940000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9464]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T12:01:00.2940000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9465]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T12:00:10.4660000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9466]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T12:00:05.2030000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9467]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T12:00:05.1490000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[9468]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-20T12:00:04.9700000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[9469]
  Log Name: System
  Source: TPM
  Date: 2024-01-20T12:00:02.9100000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[9470]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T12:00:02.9100000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[9471]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T12:00:01.3570000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[9472]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.2780000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x1710 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[9473]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.2780000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000A20000001. Status 0x0. Process Id 0x1710 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[9474]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T12:00:01.2590000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[9475]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9476]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9477]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9478]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9479]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9480]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9481]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9482]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9483]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9484]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9485]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9486]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9487]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9488]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9489]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9490]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9491]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T12:00:01.0720000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9492]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T12:00:00.7740000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 19 seconds. 

Event[9493]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T11:59:59.7280000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\bbimigrate\BBI was cleared updating 1 keys and creating 1 modified pages. 

Event[9494]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T11:59:59.7200000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[9495]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T11:59:59.7130000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[9496]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T11:59:59.7130000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[9497]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T11:59:59.7130000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[9498]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:59.6990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9499]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:59.6960000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9500]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:59.6910000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9501]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:59.6910000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[9502]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:59.6910000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9503]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:59.6850000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9504]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:59.6760000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9505]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:59.6720000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9506]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T11:59:58.6420000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[9507]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T11:59:58.6420000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[9508]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-20T11:59:58.6370000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[9509]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.6290000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[9510]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.6290000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[9511]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.6170000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[9512]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.6140000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[9513]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.6000000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[9514]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.5990000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[9515]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.5970000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[9516]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.5910000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[9517]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.5810000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[9518]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.5770000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[9519]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-20T11:59:58.5600000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[9520]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T11:59:58.5370000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[9521]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-20T11:59:58.5370000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[9522]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-20T11:59:56.9890000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[9523]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T11:59:56.4660000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[9524]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T11:59:55.9850000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[9525]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T11:59:55.6020000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[9526]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T11:59:52.9740000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[9527]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T11:59:52.5690000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[9528]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T11:59:51.9240000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[9529]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-20T11:59:51.1590000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[9530]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T11:59:49.7430000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[9531]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-20T11:59:49.4670000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[9532]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T11:59:49.2780000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9533]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T11:59:49.2780000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9534]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T11:59:49.2310000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9535]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T11:59:49.2310000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9536]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T11:59:49.2150000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9537]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-20T11:59:49.2000000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[9538]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-20T11:59:49.2000000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[9539]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-20T11:59:49.1530000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[9540]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9541]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9542]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9543]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9544]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9545]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9546]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9547]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1400000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9548]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1330000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9549]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1320000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9550]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9551]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9552]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9553]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9554]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1210000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9555]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1210000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9556]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9557]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9558]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1160000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9559]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9560]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9561]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9562]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.1120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9563]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-20T11:59:49.0990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9564]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T11:59:48.6720000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[9565]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T11:59:48.6600000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[9566]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:48.5960000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9567]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:48.3980000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9568]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-20T11:59:48.2020000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[9569]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:43.5330000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9570]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:43.5320000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9571]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-20T11:59:43.5310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9572]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-20T11:59:42.1230000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[9573]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T11:59:42.0790000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[9574]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T11:59:42.0730000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[9575]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T11:59:42.0730000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[9576]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T11:59:42.0730000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[9577]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T11:59:42.0730000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?20T11:59:41.000000000Z. 

Event[9578]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T11:59:42.0730000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[9579]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T11:59:42.0730000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[9580]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T11:59:42.0730000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[9581]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-20T11:59:42.0730000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[9582]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T11:59:42.0730000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?20T11:59:41.500000000Z. 

Event[9583]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-20T02:51:01.4240000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?20T02:51:01.424405600Z. 

Event[9584]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T02:51:01.2340000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[9585]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-20T02:50:45.0580000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Shutdown 
Event Code: 0x0 
Reason: Kernel API 

Event[9586]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T02:50:41.2700000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[9587]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-20T02:50:41.2630000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[9588]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T02:50:41.0410000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[9589]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T02:50:41.0410000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[9590]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T02:50:40.5310000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFD00000C20000001. Status 0x0. Process Id 0x16E4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9591]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T02:50:40.5310000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/50e0223b-e928-484e-ad3b-f19195f2d527/) from URL group (0xFD00000C20000001). Process Id 0x16E4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9592]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T11:59:59.7740000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 18 seconds. 

Event[9593]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T11:59:59.7730000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[9594]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T11:59:59.7730000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[9595]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T02:50:40.0830000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[9596]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T02:50:40.0820000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[9597]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T02:50:40.0820000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[9598]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-20T02:50:40.0820000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[9599]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T02:50:40.0790000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[9600]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-20T02:50:40.0780000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[9601]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T02:50:40.0390000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[9602]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-20T02:50:39.5720000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[9603]
  Log Name: System
  Source: EventLog
  Date: 2024-01-20T02:50:40.0910000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[9604]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:38.0510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9605]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:38.0360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9606]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:38.0180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9607]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:38.0010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9608]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.9810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9609]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.9660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9610]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.9510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9611]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.9360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9612]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.9210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9613]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.9050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9614]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.8900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9615]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.8750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9616]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.8600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9617]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.8460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9618]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.8310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9619]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.8160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9620]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.7990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9621]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.7840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9622]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.7690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9623]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.7530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9624]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.7380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9625]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.7220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9626]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.7060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9627]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.6900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9628]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.6740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9629]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.6590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9630]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.6430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9631]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.6280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9632]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.6120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9633]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.5960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9634]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.5800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9635]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.5640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9636]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.5470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9637]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-20T02:50:37.5290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[9638]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[9639]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[9640]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[9641]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[9642]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9643]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9644]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[9645]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[9646]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[9647]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[9648]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[9649]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[9650]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[9651]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[9652]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{2c3e765a-b6e2-11ee-894a-086ac578260b}" 

Event[9653]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[9654]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[9655]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[9656]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[9657]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-20T02:50:30.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[9658]
  Log Name: System
  Source: Application Popup
  Date: 2024-01-20T02:50:25.9980000Z
  Event ID: 26
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Application pop-up: ffprobe.exe - Application Error : The application was unable to start correctly (0xc0000142). Click OK to close the application.  

Event[9659]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T02:02:14.0260000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9660]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T02:02:14.0070000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9661]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T01:59:54.9150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9662]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T01:59:54.9100000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9663]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-20T01:59:50.0330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9664]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-20T01:59:45.9060000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9665]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T23:56:21.6660000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl31bcf08d
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8D83BB8E-2369-492E-BA20-6171F9AB4BE8}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9666]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T23:56:21.5680000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2376.0) - Current Channel (Broad) 

Event[9667]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T23:56:17.0010000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2376.0) - Current Channel (Broad) 

Event[9668]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T23:56:17.0010000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9669]
  Log Name: System
  Source: User32
  Date: 2024-01-19T23:50:25.3520000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\WINDOWS\system32\shutdown.exe (PC-MAIN) has initiated the shutdown of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: No title for this reason could be found
 Reason Code: 0x800000ff
 Shut-down Type: shutdown
 Comment:  

Event[9670]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T23:33:03.1450000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9671]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T23:30:58.9170000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9672]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-19T22:25:28.7570000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9673]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T22:25:26.8100000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9674]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T22:23:15.9370000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9675]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-19T22:08:24.7440000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9676]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-19T21:51:20.7450000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9677]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-19T21:34:16.7450000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9678]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T21:21:07.2460000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9679]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T21:19:03.1570000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9680]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-19T21:16:56.7550000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[9681]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-19T21:16:56.7420000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[9682]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T21:16:47.1720000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\DRIVERS (TM: {9fda9ce7-b6f4-11ee-894a-086ac578260b}, RM: {9fda9ce6-b6f4-11ee-894a-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[9683]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T21:16:47.1350000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\SYSTEM (TM: {9fda9ce2-b6f4-11ee-894a-086ac578260b}, RM: {9fda9ce1-b6f4-11ee-894a-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[9684]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T21:16:40.6960000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\WINDOWS\System32\config\DRIVERS (TM: {9fda9b86-b6f4-11ee-894a-086ac578260b}, RM: {9fda9b85-b6f4-11ee-894a-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[9685]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T21:16:40.6560000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\WINDOWS\System32\config\SYSTEM (TM: {9fda9b7f-b6f4-11ee-894a-086ac578260b}, RM: {9fda9b7e-b6f4-11ee-894a-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[9686]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T21:15:12.2200000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[9687]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T21:02:09.9950000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000001). Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9688]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T21:02:09.9880000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9689]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T20:59:54.9220000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9690]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T20:59:54.9160000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000002). Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9691]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T20:59:50.0130000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000002). Status: 0x0. Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9692]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T20:59:45.9120000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9693]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T18:09:32.6880000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9694]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T18:07:28.5510000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9695]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T18:06:56.4000000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000001). Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9696]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T18:06:56.3920000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9697]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T18:04:48.5140000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9698]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T18:04:48.5080000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000002). Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9699]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T18:04:48.4110000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000002). Status: 0x0. Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9700]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T18:04:48.4040000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9701]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T18:04:33.2040000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9702]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T18:04:33.1990000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9703]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T18:04:28.3410000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0xAD44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9704]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T18:04:24.1930000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9705]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-19T18:00:11.8240000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy2) is healthy.  No action is needed. 

Event[9706]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T17:58:38.2360000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 17 keys and creating 3 modified pages. 

Event[9707]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T17:19:49.2900000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[9708]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T16:59:18.0480000Z
  Event ID: 7034
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The EaseUS UPDATE SERVICE service terminated unexpectedly. It has done this 1 time(s). 

Event[9709]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T16:41:38.7760000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  teVirtualMIDI - Virtual MIDI Driver x64
Service File Name:  \SystemRoot\System32\drivers\teVirtualMIDI64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9710]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T16:01:22.5420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[9711]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T15:59:38.0820000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9712]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 25864. 

Event[9713]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 25864. 

Event[9714]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[9715]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[9716]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[9717]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[9718]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[9719]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[9720]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[9721]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[9722]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[9723]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{2c3e765a-b6e2-11ee-894a-086ac578260b}" 

Event[9724]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[9725]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[9726]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[9727]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9728]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[9729]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[9730]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[9731]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[9732]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[9733]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[9734]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[9735]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[9736]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[9737]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[9738]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[9739]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[9740]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[9741]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[9742]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[9743]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T15:59:27.9360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[9744]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T15:59:25.0350000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9745]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T15:59:24.3910000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9746]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T15:59:21.3070000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsle2f4c8bb
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{59A0619C-69C2-49BA-A61D-031EF5418F75}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9747]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T15:59:21.3030000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2370.0) - Current Channel (Broad) 

Event[9748]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T15:59:14.2890000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2370.0) - Current Channel (Broad) 

Event[9749]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T15:58:55.2450000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9750]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T15:58:37.1300000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9751]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T15:58:37.1280000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9752]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-19T15:58:36.6870000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[9753]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T15:51:16.2120000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsle937a34a
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B49F9233-2591-48AB-97A3-A3C3513BE336}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9754]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T15:50:47.6060000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9755]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:50:43.7650000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/50e0223b-e928-484e-ad3b-f19195f2d527/) to URL group (0xFD00000C20000001). Status: 0x0. Process Id 0x16E4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9756]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:50:43.7640000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFD00000C20000001. Status 0x0. Process Id 0x16E4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[9757]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:49:40.4040000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9758]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:49:40.4040000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9759]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:49:40.4040000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9760]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:49:40.4040000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9761]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:49:40.3890000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9762]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:49:40.3890000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9763]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:49:40.3890000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9764]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:49:40.3890000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[9765]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T15:48:53.5850000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9766]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-19T15:48:47.2110000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[9767]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-19T15:48:47.0640000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[9768]
  Log Name: System
  Source: TPM
  Date: 2024-01-19T15:48:46.4180000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[9769]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T15:48:46.4170000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[9770]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:45.0990000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9771]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T15:48:44.2460000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve was cleared updating 15602 keys and creating 5897 modified pages. 

Event[9772]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-19T15:48:43.6270000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[9773]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5900000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFF00000C20000001). Status: 0x0. Process Id 0x1824 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[9774]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5900000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFF00000C20000001. Status 0x0. Process Id 0x1824 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[9775]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-19T15:48:43.5710000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[9776]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9777]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9778]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9779]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9780]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9781]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9782]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9783]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9784]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9785]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9786]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9787]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9788]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9789]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9790]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9791]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9792]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:48:43.5010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[9793]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-19T15:48:42.3500000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[9794]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-19T15:48:42.3440000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[9795]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-19T15:48:42.3440000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[9796]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-19T15:48:42.3440000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[9797]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:42.3050000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9798]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:42.3020000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9799]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:42.2970000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9800]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:42.2970000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[9801]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:42.2970000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9802]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:42.2930000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9803]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:42.2830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9804]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:42.2790000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9805]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-19T15:48:41.4330000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[9806]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-19T15:48:41.4330000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[9807]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-19T15:48:41.4290000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[9808]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.4200000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[9809]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.4200000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[9810]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.4080000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[9811]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.4050000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[9812]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.3910000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[9813]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.3890000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[9814]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.3870000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[9815]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.3810000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[9816]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.3710000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[9817]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.3670000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[9818]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-19T15:48:41.3520000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[9819]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-19T15:48:41.3280000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[9820]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-19T15:48:41.3280000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[9821]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-19T15:48:39.8650000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[9822]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T15:48:39.4980000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[9823]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-19T15:48:38.9730000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[9824]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-19T15:48:38.6090000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[9825]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-19T15:48:37.4590000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[9826]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-19T15:48:36.1590000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[9827]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-19T15:48:35.8750000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[9828]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-19T15:48:32.1040000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[9829]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-19T15:48:31.1550000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[9830]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-19T15:48:29.5930000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[9831]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-19T15:48:29.4030000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9832]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-19T15:48:29.4030000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9833]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-19T15:48:29.3400000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9834]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-19T15:48:29.3400000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9835]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-19T15:48:29.3250000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[9836]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-19T15:48:29.3090000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[9837]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-19T15:48:29.3090000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[9838]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-19T15:48:29.2470000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[9839]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9840]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2500000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9841]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9842]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2480000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9843]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9844]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9845]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2400000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9846]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2390000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[9847]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2330000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9848]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2320000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9849]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9850]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9851]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9852]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2230000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9853]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9854]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9855]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9856]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9857]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9858]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9859]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2100000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9860]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2100000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9861]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.2090000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[9862]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-19T15:48:29.1950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[9863]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-19T15:48:28.7720000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[9864]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-19T15:48:28.7610000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[9865]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-19T15:48:28.7600000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[9866]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:28.7340000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9867]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:28.6390000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9868]
  Log Name: System
  Source: volmgr
  Date: 2024-01-19T15:48:28.6020000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[9869]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-19T15:48:28.5580000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[9870]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:23.7910000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9871]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:23.7900000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9872]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-19T15:48:23.7890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[9873]
  Log Name: System
  Source: EventLog
  Date: 2024-01-19T15:48:42.4280000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 20 seconds. 

Event[9874]
  Log Name: System
  Source: EventLog
  Date: 2024-01-19T15:48:42.4270000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[9875]
  Log Name: System
  Source: EventLog
  Date: 2024-01-19T15:48:42.4270000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[9876]
  Log Name: System
  Source: EventLog
  Date: 2024-01-19T15:48:42.4270000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 15:31:19 on ?19/?01/?2024 was unexpected. 

Event[9877]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-19T15:48:22.1150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[9878]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T15:48:22.0760000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[9879]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T15:48:22.0710000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[9880]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T15:48:22.0710000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[9881]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T15:48:22.0710000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[9882]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T15:48:22.0710000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?19T15:48:21.000000000Z. 

Event[9883]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T15:48:22.0710000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[9884]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T15:48:22.0700000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[9885]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T15:48:22.0700000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[9886]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T15:48:22.0700000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[9887]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T15:48:22.0700000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?19T15:48:21.500000000Z. 

Event[9888]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T15:42:22.9840000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos 

Event[9889]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T15:42:20.3740000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJBH4-Microsoft.Windows.Photos 

Event[9890]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T15:42:17.0840000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2024.11010.10002.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[9891]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T15:41:41.9260000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9892]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T15:41:33.0140000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9893]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T15:41:28.1210000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9894]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T15:41:28.1210000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9895]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:41:09.7940000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000152000000B). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9896]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T15:41:09.7880000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9897]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:39:02.6540000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000152000000B). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9898]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:39:02.6370000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9899]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T15:38:57.8240000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9900]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T15:38:53.6300000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9901]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T14:37:14.3900000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 12 keys and creating 2 modified pages. 

Event[9902]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T14:19:08.4160000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9903]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T12:42:33.8580000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9904]
  Log Name: System
  Source: EventLog
  Date: 2024-01-19T12:00:00.8420000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 407275 seconds. 

Event[9905]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T11:45:00.8980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[9906]
  Log Name: System
  Source: Schannel
  Date: 2024-01-19T11:15:12.2230000Z
  Event ID: 36871
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A fatal error occurred while creating a TLS client credential. The internal error state is 10013.
 The SSPI client process is IDMan (PID: 14264). 

Event[9907]
  Log Name: System
  Source: Schannel
  Date: 2024-01-19T11:15:12.2230000Z
  Event ID: 36871
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A fatal error occurred while creating a TLS client credential. The internal error state is 10013.
 The SSPI client process is IDMan (PID: 14264). 

Event[9908]
  Log Name: System
  Source: Schannel
  Date: 2024-01-19T11:11:42.4010000Z
  Event ID: 36871
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A fatal error occurred while creating a TLS client credential. The internal error state is 10013.
 The SSPI client process is IDMan (PID: 20244). 

Event[9909]
  Log Name: System
  Source: Schannel
  Date: 2024-01-19T11:11:42.4010000Z
  Event ID: 36871
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A fatal error occurred while creating a TLS client credential. The internal error state is 10013.
 The SSPI client process is IDMan (PID: 20244). 

Event[9910]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T11:02:15.1920000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9911]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T11:02:15.1900000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9912]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T11:02:15.0750000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9913]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:49:42.1240000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9914]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T10:49:42.1140000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9915]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:38.2580000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9916]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:38.2400000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000142000000A). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9917]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:38.1260000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000142000000A). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9918]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:38.1200000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000008). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9919]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:25.9470000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000008). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9920]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:25.9380000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9921]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:25.8260000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9922]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:25.8160000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000009). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9923]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:17.8650000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000009). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9924]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:17.8590000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000007). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9925]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:17.7630000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000007). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9926]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:17.7530000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000008). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9927]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:06.5620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000008). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9928]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:06.5560000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9929]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:47:01.6920000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9930]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T10:46:57.5490000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9931]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T10:43:11.7100000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\5dcae29e714826b0_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9932]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:41:21.8720000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9933]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T10:41:21.8620000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[9934]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:39:17.9740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9935]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:39:17.9690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9936]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:39:17.8720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9937]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:39:17.8660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE0000152000000A). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9938]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:39:02.6640000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE0000152000000A). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9939]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:39:02.6370000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000007). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9940]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-19T10:38:57.8430000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000007). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[9941]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T10:38:53.6190000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[9942]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T10:38:43.4740000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[9943]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T10:38:21.5780000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\Settings\settings.dat was cleared updating 28 keys and creating 5 modified pages. 

Event[9944]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-19T10:38:20.9600000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl8cffe9af
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B49F9233-2591-48AB-97A3-A3C3513BE336}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[9945]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T10:38:20.9140000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2343.0) - Current Channel (Broad) 

Event[9946]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T10:38:15.5740000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2343.0) - Current Channel (Broad) 

Event[9947]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-19T10:38:06.5320000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[9948]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T10:38:05.5670000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9949]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T10:37:55.9820000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9950]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 9664. 

Event[9951]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 9664. 

Event[9952]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[9953]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[9954]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[9955]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[9956]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[9957]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[9958]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[9959]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[9960]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[9961]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{4dbdac85-b655-11ee-8949-086ac578260b}" 

Event[9962]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[9963]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[9964]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[9965]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[9966]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e} 

Event[9967]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[9968]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[9969]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca6-31dd-9ba 

Event[9970]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 5; device name: \Volume{234e3a45-fca6-31dd-9bac-204183070f1e}. 

Event[9971]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[9972]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca6-31dd-9bac-204183070f1e}" created 

Event[9973]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[9974]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[9975]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[9976]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca6-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[9977]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[9978]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 5l 

Event[9979]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[9980]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[9981]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T10:37:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[9982]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T10:37:43.0610000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9983]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-19T10:37:12.7960000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[9984]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-19T10:37:08.7730000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?19T00:44:47.145116600Z
Wake Time: ?2024?-?01?-?19T10:37:07.742142400Z

Wake Source: Unknown 

Event[9985]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-19T10:37:08.7430000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[9986]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T10:37:08.4790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9987]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-19T10:37:08.4760000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[9988]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-19T10:37:08.3180000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[9989]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-19T10:37:07.8350000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 38 to 40.

Reason Unknown 

BootId: 8 

Event[9990]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-19T10:37:07.7040000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 37 to 38.

Reason SxTransition 

BootId: 8 

Event[9991]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T10:37:07.7030000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[9992]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T10:37:07.7030000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[9993]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-19T10:37:07.7030000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[9994]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-19T10:37:07.0740000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[9995]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-19T10:37:06.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?19T10:37:06.500000000Z from ?2024?-?01?-?19T00:44:56.332245900Z.
Time Delta: 35530167 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?19T10:37:06.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[9996]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-19T00:44:56.3320000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[9997]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-19T00:44:50.3890000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[9998]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-19T00:44:47.1580000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 36 to 37.

Reason InputHid 

BootId: 8 

Event[9999]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-19T00:44:47.1450000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[10000]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-19T00:44:46.6450000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[10001]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[10002]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[10003]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[10004]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[10005]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[10006]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[10007]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[10008]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[10009]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[10010]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[10011]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}" 

Event[10012]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[10013]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[10014]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[10015]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{5b59ef13-a74d-11ee-893c-086ac578260b}" 

Event[10016]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[10017]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca1-31dd-9bac-2041830 

Event[10018]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[10019]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[10020]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-19T00:44:37.4140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[10021]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T23:51:27.4490000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10022]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T23:49:16.2600000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10023]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T23:36:08.0580000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000F20000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10024]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T23:36:08.0310000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10025]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-18T23:33:39.8760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Wake from sleep detected. 

Event[10026]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T23:33:36.9360000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000F20000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10027]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T23:33:36.9210000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000006). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10028]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T23:33:35.8350000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?18T23:33:35.751185500Z from ?2024?-?01?-?18T23:33:35.750834600Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 22000).

RTC time: ?2024?-?01?-?18T23:33:35.751185500Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10029]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T23:33:35.7510000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10030]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T23:33:35.7500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?18T23:33:35.665848100Z from ?2024?-?01?-?18T23:33:35.665009900Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 22000).

RTC time: ?2024?-?01?-?18T23:33:35.665848100Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10031]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T23:33:35.6660000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10032]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T23:33:35.6650000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[10033]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T23:33:35.6650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?18T23:33:35.577025300Z from ?2024?-?01?-?18T23:33:33.368892000Z.
Time Delta: 2208 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 22000).

RTC time: ?2024?-?01?-?18T23:33:35.577025300Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10034]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T23:33:35.5770000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10035]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T23:33:33.3680000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[10036]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T23:33:29.8470000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000006). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10037]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T23:33:25.7090000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10038]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T23:33:02.6680000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10039]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T23:30:58.3680000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10040]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T22:23:38.2510000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10041]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T22:21:34.0130000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10042]
  Log Name: System
  Source: Application Popup
  Date: 2024-01-18T22:21:15.8030000Z
  Event ID: 26
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Application pop-up: Harmony Engine 4x.vst3: Start Error : Out of place engine initialization failed -> Application is terminated! 

Event[10043]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T18:09:32.5040000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10044]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T18:07:28.2850000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10045]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-18T17:49:23.1470000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy8) is healthy.  No action is needed. 

Event[10046]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T15:36:34.7140000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10047]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T15:35:57.3650000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10048]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T15:34:30.6490000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10049]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T15:18:53.3610000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10050]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T15:05:03.8030000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\3603e1b8515f2a34_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[10051]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T15:05:03.7210000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\9d174002b722e1ca_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[10052]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T15:01:49.3580000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10053]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T14:44:45.3540000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10054]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T14:28:35.4320000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \Device\HarddiskVolume7\EFI\Microsoft\Recovery\BCD was cleared updating 64 keys and creating 4 modified pages. 

Event[10055]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T14:27:25.3600000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[10056]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T14:27:25.3470000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10057]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T13:46:10.5940000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10058]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T13:46:09.1030000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10059]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T13:46:09.1030000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10060]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:35:54.0510000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000F20000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10061]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T13:35:54.0420000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10062]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:50.2930000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000F20000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10063]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:50.1690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000F20000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10064]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:50.0630000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000F20000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10065]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:50.0560000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000F20000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10066]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:46.0700000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000F20000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10067]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:46.0560000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000007). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10068]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:45.9600000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000007). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10069]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:45.9540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000007). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10070]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:34.7420000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000007). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10071]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:34.7360000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10072]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-18T13:33:29.8770000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10073]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T13:33:25.7320000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10074]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-18T13:32:33.3300000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10075]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T13:02:27.0600000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 34 to 36.

Reason InputHid 

BootId: 8 

Event[10076]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T12:29:51.2630000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2322.0) - Current Channel (Broad) 

Event[10077]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T12:29:51.2560000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslcad0bc2c
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7A36962E-CD19-4229-94C0-E11A2F4344E5}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[10078]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T12:29:46.9550000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2322.0) - Current Channel (Broad) 

Event[10079]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T12:29:39.9130000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10080]
  Log Name: System
  Source: EventLog
  Date: 2024-01-18T12:00:00.5270000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 320877 seconds. 

Event[10081]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T11:40:12.2330000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10082]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T11:38:07.9700000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10083]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T11:32:39.9730000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 33 to 34.

Reason SessionUnlock 

BootId: 8 

Event[10084]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T11:31:39.9420000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 31 to 33.

Reason InputAccelerometer 

BootId: 8 

Event[10085]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T11:30:13.4580000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 30 to 31.

Reason SessionUnlock 

BootId: 8 

Event[10086]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T11:29:45.9600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\AdobeNotificationClient_enpm4xejd91yc\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\c8cc5933513302b2_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[10087]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T11:29:45.9590000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[10088]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T11:29:45.9580000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\User.dat was cleared updating 7 keys and creating 1 modified pages. 

Event[10089]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T11:28:47.4640000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 28 to 30.

Reason InputAccelerometer 

BootId: 8 

Event[10090]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T11:28:35.6570000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 27 to 28.

Reason SessionUnlock 

BootId: 8 

Event[10091]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T11:27:35.6280000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 25 to 27.

Reason InputAccelerometer 

BootId: 8 

Event[10092]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T10:26:36.6480000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 24 to 25.

Reason SessionUnlock 

BootId: 8 

Event[10093]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T10:25:35.6460000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 22 to 24.

Reason InputHid 

BootId: 8 

Event[10094]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T10:05:10.1100000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 21 to 22.

Reason SessionUnlock 

BootId: 8 

Event[10095]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T10:03:25.1210000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 19 to 21.

Reason InputHid 

BootId: 8 

Event[10096]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T09:51:19.2830000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 18 to 19.

Reason SessionUnlock 

BootId: 8 

Event[10097]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-18T09:50:49.4000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[10098]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-18T09:50:19.2930000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 16 to 18.

Reason InputAccelerometer 

BootId: 8 

Event[10099]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-18T08:40:54.7100000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[10100]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T08:40:54.0930000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the XVDD Port Driver service was changed from disabled to demand start. 

Event[10101]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T08:40:53.7380000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the XVDD Port Driver service was changed from demand start to disabled. 

Event[10102]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-18T08:40:53.6230000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (Version 10.0, ?2010?-?06?-?15T03:47:08.000000000Z) unloaded successfully. 

Event[10103]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T08:40:52.8630000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9MWPM2CQNLHN-Microsoft.GamingServices 

Event[10104]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-18T08:40:52.3720000Z
  Event ID: 10005
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
DCOM got error "87" attempting to start the service GamingServices with arguments "Unavailable" in order to run the server:
{3E8C9ABE-9226-4609-BF5B-60288A391DEE} 

Event[10105]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-18T08:40:52.2620000Z
  Event ID: 10005
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
DCOM got error "87" attempting to start the service GamingServices with arguments "Unavailable" in order to run the server:
{3E8C9ABE-9226-4609-BF5B-60288A391DEE} 

Event[10106]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-18T08:40:52.2580000Z
  Event ID: 10005
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
DCOM got error "87" attempting to start the service GamingServices with arguments "Unavailable" in order to run the server:
{D529741A-1BF1-4D1E-9976-35089622E758} 

Event[10107]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T08:40:52.2370000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Gaming Services
Service File Name:  "C:\Program Files\WindowsApps\Microsoft.GamingServices_17.85.5002.0_x64__8wekyb3d8bbwe\GamingServices.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[10108]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T08:40:52.2350000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Gaming Services
Service File Name:  "C:\Program Files\WindowsApps\Microsoft.GamingServices_17.85.5002.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  NT AUTHORITY\LocalService 

Event[10109]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T08:40:51.5310000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The start type of the Gaming Services service was changed from auto start to disabled. 

Event[10110]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T08:40:51.5300000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The start type of the Gaming Services service was changed from auto start to disabled. 

Event[10111]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T08:40:51.4250000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MWPM2CQNLHN-Microsoft.GamingServices 

Event[10112]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T08:40:50.6750000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GamingServices_17.85.5002.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[10113]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T08:40:15.7330000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10114]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T08:39:46.5980000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl28cbfcfc
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{816A4004-2941-459F-B9DD-884133FFE9C2}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[10115]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T08:39:46.5940000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2310.0) - Current Channel (Broad) 

Event[10116]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T08:39:42.4020000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2310.0) - Current Channel (Broad) 

Event[10117]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-18T08:39:19.0200000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10118]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-18T08:20:07.5000000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 126619 seconds since the last report. 

Event[10119]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-18T08:20:07.5000000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 126619 seconds since the last report. 

Event[10120]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-18T08:20:07.5000000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 126619 seconds since the last report. 

Event[10121]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-18T08:20:07.5000000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 126619 seconds since the last report. 

Event[10122]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-18T08:20:07.4840000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 126619 seconds since the last report. 

Event[10123]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-18T08:20:07.4840000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 126619 seconds since the last report. 

Event[10124]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-18T08:20:07.4840000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 126619 seconds since the last report. 

Event[10125]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-18T08:20:07.4840000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 126619 seconds since the last report. 

Event[10126]
  Log Name: System
  Source: Microsoft-Windows-DNS-Client
  Date: 2024-01-18T06:31:25.3870000Z
  Event ID: 1014
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-20
  User Name: NT AUTHORITY\NETWORK SERVICE
  Computer: PC-Main
  Description: 
Name resolution for the name api.steampowered.com timed out after none of the configured DNS servers responded. Client PID 30984. 

Event[10127]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T01:49:48.2360000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10128]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-18T01:47:37.2550000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10129]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T01:07:50.5260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?18T01:07:50.441851500Z from ?2024?-?01?-?18T01:07:50.441478000Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 38716).

RTC time: ?2024?-?01?-?18T01:07:50.441851500Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10130]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-18T01:07:50.4420000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10131]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T01:07:50.4410000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[10132]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-18T01:07:50.4400000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[10133]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T23:56:34.3000000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslb42ba9fe
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D38259DD-2C83-47BC-BDBB-81281011859C}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[10134]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T23:56:34.2950000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2292.0) - Current Channel (Broad) 

Event[10135]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T23:56:29.2640000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2292.0) - Current Channel (Broad) 

Event[10136]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T23:56:29.2640000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10137]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T23:33:02.5940000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10138]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T23:30:58.3630000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10139]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-17T22:56:24.7510000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 15 to 16.

Reason SessionUnlock 

BootId: 8 

Event[10140]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:55:26.2870000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10141]
  Log Name: System
  Source: User32
  Date: 2024-01-17T22:55:23.9860000Z
  Event ID: 1073
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The attempt by user PC-MAIN\felip to restart/shutdown computer PC-MAIN failed 

Event[10142]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.1270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10143]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.1180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10144]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.1080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10145]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10146]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10147]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10148]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10149]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10150]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10151]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10152]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10153]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10154]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10155]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:29.0000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10156]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10157]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10158]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10159]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10160]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10161]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10162]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10163]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10164]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10165]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.9040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10166]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10167]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10168]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10169]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10170]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10171]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10172]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10173]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10174]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10175]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.8080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10176]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10177]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10178]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10179]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10180]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10181]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10182]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10183]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10184]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10185]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.7040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10186]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10187]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10188]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10189]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10190]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10191]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10192]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10193]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10194]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10195]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10196]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.6030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10197]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10198]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10199]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10200]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10201]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10202]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10203]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10204]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10205]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10206]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.5010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10207]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10208]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10209]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10210]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10211]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10212]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10213]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10214]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10215]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10216]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.4060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10217]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10218]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10219]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10220]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10221]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10222]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10223]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10224]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10225]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10226]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.3090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10227]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10228]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10229]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10230]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10231]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10232]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10233]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10234]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10235]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10236]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10237]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.2020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10238]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.1920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10239]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.1830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10240]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.1730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10241]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.1640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10242]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.1530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10243]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.1430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10244]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.1330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10245]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:28.1230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10246]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.8820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10247]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.8720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10248]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.8630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10249]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.8540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10250]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.8440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10251]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.8340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10252]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.8240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10253]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.8130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10254]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.8030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10255]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10256]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10257]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10258]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10259]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10260]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10261]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10262]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10263]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10264]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.7040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10265]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10266]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10267]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10268]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10269]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10270]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10271]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10272]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10273]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10274]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.6070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10275]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.5970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10276]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.5830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10277]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.5720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10278]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.5580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10279]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.5480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10280]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.5380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10281]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.5270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10282]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.5180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10283]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.5070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10284]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10285]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10286]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10287]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10288]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10289]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10290]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10291]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10292]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10293]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.4080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10294]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.3960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10295]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.3840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10296]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.3740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10297]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.3630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10298]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.3510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10299]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.3370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10300]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.3260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10301]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.3140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10302]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.3010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10303]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.2900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10304]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.2780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10305]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.2670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10306]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.2510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10307]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.2350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10308]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.2210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10309]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.2090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10310]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10311]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10312]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10313]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10314]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10315]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10316]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10317]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10318]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10319]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.1030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10320]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.0930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10321]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.0820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10322]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.0720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10323]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.0590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10324]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.0490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10325]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.0400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10326]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.0280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10327]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:26.0130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10328]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.9980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10329]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.9810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10330]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.9670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10331]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.9520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10332]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.9390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10333]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.9280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10334]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.9160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10335]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.9060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10336]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.8940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10337]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.8800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10338]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.8710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10339]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.8610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10340]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.8460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10341]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.8340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10342]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.8240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10343]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.8100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10344]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.7990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10345]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.7850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10346]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.7740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10347]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.7590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10348]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.7470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10349]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.7340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10350]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.7200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10351]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.7080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10352]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.6740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10353]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.6180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10354]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.6060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10355]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.5960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10356]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.5850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10357]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.5730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10358]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.5470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10359]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.2580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10360]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.2030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10361]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10362]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10363]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10364]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10365]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10366]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10367]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10368]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10369]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10370]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.1010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10371]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.0920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10372]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.0820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10373]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.0720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10374]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.0620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10375]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.0520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10376]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.0430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10377]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:25.0330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10378]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T22:54:24.9020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10379]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T22:28:52.9550000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\cbea4c70310ea64c_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[10380]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T22:28:52.9530000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\SystemAppData\Helium\UserClasses.dat was cleared updating 9 keys and creating 2 modified pages. 

Event[10381]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T22:28:52.9520000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\SystemAppData\Helium\User.dat was cleared updating 8 keys and creating 1 modified pages. 

Event[10382]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T22:23:33.9610000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10383]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T22:21:29.7180000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10384]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T21:41:18.7330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000009). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10385]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T21:41:18.7220000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10386]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T21:39:06.8560000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000009). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10387]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T21:39:06.8500000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000007). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10388]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T21:39:06.7380000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000007). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10389]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T21:39:06.7280000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10390]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T21:38:47.5390000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10391]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T21:38:47.5330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10392]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T21:38:42.6670000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10393]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T21:38:38.5290000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10394]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T18:21:38.5610000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10395]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T18:21:38.5230000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10396]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T18:19:34.7510000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10397]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T18:19:34.7260000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000006). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10398]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T18:19:34.6130000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000006). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10399]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T18:19:34.5830000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000006). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10400]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T18:19:19.1720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000006). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10401]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T18:19:19.1450000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000009). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10402]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T18:19:14.4200000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000009). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10403]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T18:19:10.1340000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10404]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T18:09:32.4260000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10405]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T18:07:28.2880000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10406]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:51:42.9350000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000008). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10407]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T17:51:42.9130000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10408]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:49:39.0470000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000008). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10409]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:49:39.0170000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10410]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:49:38.9140000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10411]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:49:38.9060000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000007). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10412]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:48:34.4520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000007). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10413]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:48:34.4130000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10414]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:48:34.2960000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10415]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:48:34.2850000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000008). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10416]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:48:11.2960000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000008). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10417]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:48:11.0700000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10418]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T17:48:06.2180000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10419]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T17:48:02.0550000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10420]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-17T17:10:14.4350000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10421]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-17T16:53:10.4310000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10422]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-17T16:36:06.4290000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10423]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-17T16:19:02.4260000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10424]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:12:17.3900000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS 

Event[10425]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:12:16.2860000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp 

Event[10426]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:12:16.1630000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS 

Event[10427]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T16:12:15.8790000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.StorePurchaseApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[10428]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:12:15.2080000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NBLGGH4LS1F-Microsoft.StorePurchaseApp 

Event[10429]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T16:12:15.0540000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_16005.14326.21778.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[10430]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T16:12:14.7130000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.StorePurchaseApp_22312.1401.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[10431]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:12:14.1960000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE 

Event[10432]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:12:13.2070000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE 

Event[10433]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T16:12:11.9370000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22312.1401.5.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[10434]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:11:47.1260000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10435]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:11:47.1260000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10436]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:11:47.1260000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10437]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T16:06:14.4090000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10438]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T16:04:10.3380000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10439]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T16:03:17.6520000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\LandfallGames.TotallyAccurateBattleSimulator_r2vq7k2y0v9ct\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[10440]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:02:01.4300000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10441]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T16:02:01.4300000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10442]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T16:01:50.9250000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl26f81022
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{90BA0C94-9396-4975-8514-E8743518E88C}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[10443]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-17T16:01:42.4320000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[10444]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-17T16:01:42.4190000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10445]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T15:08:16.8230000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_424.400.20.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10446]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:50:34.1350000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000006). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10447]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:50:34.1190000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10448]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:48:26.2760000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000006). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10449]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:48:26.2690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10450]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:48:26.1620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10451]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:48:26.1510000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10452]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:48:10.7800000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10453]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:48:10.7730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10454]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:48:05.9030000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10455]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:48:01.7630000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10456]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:47:54.7340000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000D20000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10457]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:47:54.7270000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10458]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:47:51.7030000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Malwarebytes Windows Firewall Control
Service File Name:  "C:\Program Files\Malwarebytes\Windows Firewall Control\wfcs.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[10459]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:45:46.8350000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000D20000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10460]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:45:46.8290000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000006). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10461]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:45:46.7300000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000006). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10462]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:45:46.7220000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000009). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10463]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:45:31.4900000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000009). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10464]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:45:31.4690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10465]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:45:26.7000000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10466]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:45:22.4620000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10467]
  Log Name: System
  Source: Microsoft-Windows-GroupPolicy
  Date: 2024-01-17T12:43:31.2590000Z
  Event ID: 1502
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied. 

Event[10468]
  Log Name: System
  Source: Microsoft-Windows-GroupPolicy
  Date: 2024-01-17T12:43:00.0430000Z
  Event ID: 1502
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied. 

Event[10469]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:38:47.1480000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AbletonPush_cci_{2b271121-75d6-4417-902f-524cfd81324a} service failed to start due to the following error: 
A device attached to the system is not functioning. 

Event[10470]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:38:47.1440000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  AbletonPush_cci_{2b271121-75d6-4417-902f-524cfd81324a}
Service File Name:  C:\Users\felip\AppData\Local\Temp\{261FF44C-A65D-4A48-811C-125393D9F32F}\pckMBtGzTm9C8l\x64\AbletonPush.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[10471]
  Log Name: System
  Source: Microsoft-Windows-GroupPolicy
  Date: 2024-01-17T12:35:37.5830000Z
  Event ID: 1502
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied. 

Event[10472]
  Log Name: System
  Source: Microsoft-Windows-GroupPolicy
  Date: 2024-01-17T12:35:05.6660000Z
  Event ID: 1502
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied. 

Event[10473]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-17T12:32:36.8820000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy7) is healthy.  No action is needed. 

Event[10474]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:18:52.3500000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10475]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:16:48.2490000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10476]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:11:45.8470000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10477]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:09:41.7560000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10478]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:07:15.2010000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000007). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10479]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:07:15.1800000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10480]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:05:11.3280000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000007). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10481]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:05:11.3180000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000008). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10482]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:05:11.2220000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000008). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10483]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:05:11.2100000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10484]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:59.2320000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10485]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:59.2260000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001220000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10486]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:59.1260000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001220000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10487]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:59.1180000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001220000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10488]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:39.0880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001220000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10489]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:39.0820000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000007). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10490]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:38.9840000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000007). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10491]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:38.9770000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10492]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:28.8480000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10493]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:28.8400000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10494]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:28.7310000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10495]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:28.7250000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000006). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10496]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:05.2760000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000006). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10497]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:05.2620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000006). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10498]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:04:00.4750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000006). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10499]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:03:56.2530000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10500]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T12:02:42.2540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[10501]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T12:00:15.9170000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10502]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T12:00:15.8920000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10503]
  Log Name: System
  Source: EventLog
  Date: 2024-01-17T12:00:00.2720000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 234477 seconds. 

Event[10504]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:57:56.7870000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10505]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:57:56.7810000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10506]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:57:51.9140000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10507]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T11:57:47.7780000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10508]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T11:53:05.1020000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl2018579a
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{48A67362-B27E-4536-8BAB-BF0BA3B33275}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[10509]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T11:53:05.0710000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2271.0) - Current Channel (Broad) 

Event[10510]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T11:52:59.7820000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2271.0) - Current Channel (Broad) 

Event[10511]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-17T11:52:51.8560000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10512]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:42:42.7450000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10513]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:41:22.7080000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10514]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T11:41:22.6450000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10515]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:40:26.8770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[10516]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:39:25.3190000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10517]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:39:23.3470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10518]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:39:18.1690000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10519]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:39:18.1620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10520]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:39:18.0560000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10521]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:39:18.0510000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10522]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:38:56.8470000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10523]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:38:56.8390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10524]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:38:56.7350000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10525]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:38:56.7290000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10526]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:38:38.6720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10527]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:38:38.6660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10528]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T11:38:38.5690000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10529]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T11:38:22.2710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?17T11:38:22.187499500Z from ?2024?-?01?-?17T11:38:22.186675400Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 21140).

RTC time: ?2024?-?01?-?17T11:38:22.187499500Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10530]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T11:38:22.1870000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10531]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T11:38:22.1870000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?17T11:38:22.100602100Z from ?2024?-?01?-?17T11:38:22.100540200Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 21140).

RTC time: ?2024?-?01?-?17T11:38:22.100602100Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10532]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T11:38:22.1000000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10533]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-17T11:38:22.1000000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[10534]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T11:38:22.1000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?17T11:38:22.014104700Z from ?2024?-?01?-?17T11:38:24.376959500Z.
Time Delta: -2362 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 21140).

RTC time: ?2024?-?01?-?17T11:38:22.014104700Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10535]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T11:38:22.0140000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10536]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:38:22.1580000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10537]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 6252. 

Event[10538]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 6252. 

Event[10539]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[10540]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[10541]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[10542]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[10543]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[10544]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[10545]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[10546]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[10547]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[10548]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{5b59ef13-a74d-11ee-893c-086ac578260b}" 

Event[10549]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[10550]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[10551]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[10552]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[10553]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e} 

Event[10554]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[10555]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[10556]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca1-31dd-9ba 

Event[10557]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 4; device name: \Volume{234e3a45-fca1-31dd-9bac-204183070f1e}. 

Event[10558]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[10559]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca1-31dd-9bac-204183070f1e}" created 

Event[10560]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[10561]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[10562]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[10563]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca1-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[10564]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[10565]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 4l 

Event[10566]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[10567]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[10568]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T11:38:10.0320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[10569]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-17T11:38:08.3870000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[10570]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:38:06.3580000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10571]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T11:38:03.6140000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10572]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:37:59.9970000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10573]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:37:52.2750000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10574]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-17T11:37:31.7310000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[10575]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T11:37:30.6890000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[10576]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-17T11:37:27.8740000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?17T00:26:56.187574100Z
Wake Time: ?2024?-?01?-?17T11:37:26.835859200Z

Wake Source: Unknown 

Event[10577]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:37:27.6240000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10578]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T11:37:27.6210000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10579]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-17T11:37:27.4080000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[10580]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-17T11:37:26.9290000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 13 to 15.

Reason Unknown 

BootId: 8 

Event[10581]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-17T11:37:26.7780000Z
  Event ID: 134
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) 

Event[10582]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-17T11:37:26.7710000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[10583]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-17T11:37:26.7670000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 12 to 13.

Reason SxTransition 

BootId: 8 

Event[10584]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-17T11:37:26.7670000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[10585]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-17T11:37:26.7670000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[10586]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-17T11:37:26.7670000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[10587]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-17T11:37:26.0760000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[10588]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T11:37:25.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?17T11:37:25.500000000Z from ?2024?-?01?-?17T00:27:05.679014800Z.
Time Delta: 40219820 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?17T11:37:25.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10589]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-17T00:27:05.6790000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[10590]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-17T00:27:01.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?17T00:27:01.500000000Z from ?2024?-?01?-?17T00:26:59.384840300Z.
Time Delta: 2115 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?17T00:27:01.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10591]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-17T00:26:57.9200000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[10592]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-17T00:26:56.1900000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 11 to 12.

Reason InputAccelerometer 

BootId: 8 

Event[10593]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-17T00:26:56.1880000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[10594]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-17T00:26:55.7190000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[10595]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:54.3100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {2DE3095A-B49E-418F-B5C1-69D2CCF62A8F} did not register with DCOM within the required timeout. 

Event[10596]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.1760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10597]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.1680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10598]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.1580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10599]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.1480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10600]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.1370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10601]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.1290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10602]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.1200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10603]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.1120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10604]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.1040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10605]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10606]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10607]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10608]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10609]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10610]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10611]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10612]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10613]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10614]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10615]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:51.0060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10616]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10617]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10618]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10619]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10620]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10621]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10622]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10623]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10624]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10625]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10626]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10627]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.9010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10628]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10629]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10630]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10631]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10632]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10633]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10634]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10635]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10636]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10637]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10638]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.8040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10639]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10640]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10641]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10642]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10643]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10644]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10645]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10646]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10647]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10648]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10649]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.7000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10650]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10651]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10652]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10653]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10654]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10655]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10656]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10657]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10658]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10659]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.6040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10660]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10661]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10662]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10663]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10664]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10665]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10666]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10667]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10668]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10669]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10670]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.5060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10671]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10672]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10673]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10674]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10675]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10676]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10677]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10678]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10679]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10680]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10681]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.4020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10682]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.3930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10683]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.3840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10684]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.3750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10685]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.3650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10686]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.3560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10687]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.3490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10688]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.3420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10689]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.3310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10690]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.2170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10691]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.2070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10692]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.1970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10693]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:50.1880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10694]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:49.9250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10695]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-17T00:26:49.8280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10696]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[10697]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[10698]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[10699]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[10700]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[10701]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[10702]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[10703]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[10704]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[10705]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[10706]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" 

Event[10707]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[10708]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[10709]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[10710]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{d9687eba-b0c3-11ee-8946-086ac578260b}" 

Event[10711]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[10712]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca0-31dd-9bac-2041830 

Event[10713]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[10714]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[10715]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-17T00:26:48.2470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[10716]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-17T00:24:18.1110000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 9 to 11.

Reason InputAccelerometer 

BootId: 8 

Event[10717]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T00:07:25.2420000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001220000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10718]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T00:07:25.1590000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10719]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T00:04:45.9750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001220000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10720]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T00:04:45.9570000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000006). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10721]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-17T00:04:41.1540000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000006). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10722]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-17T00:04:36.9460000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10723]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T23:33:02.8600000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10724]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T23:30:58.4050000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10725]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T23:09:10.5430000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000006). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10726]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T23:09:10.5110000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10727]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T23:06:50.6980000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000006). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10728]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T23:06:50.6720000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10729]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T23:06:50.5520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10730]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T23:06:50.5340000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10731]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T23:06:43.2710000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10732]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T23:06:43.2540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10733]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T23:06:38.3790000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10734]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T23:06:34.2480000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10735]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-16T22:54:00.5700000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 8 to 9.

Reason SessionUnlock 

BootId: 8 

Event[10736]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T22:23:29.5920000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10737]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T22:21:25.1890000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10738]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T21:29:01.1980000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslec71caea
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{73E51D0C-AE24-44C1-B96E-8E98471172BD}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[10739]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-16T21:29:01.1410000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2248.0) - Current Channel (Broad) 

Event[10740]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-16T21:28:56.6640000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2248.0) - Current Channel (Broad) 

Event[10741]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-16T21:28:56.6640000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10742]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-16T21:09:47.9270000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 180978 seconds since the last report. 

Event[10743]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-16T21:09:47.9270000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 180978 seconds since the last report. 

Event[10744]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-16T21:09:47.9270000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 180978 seconds since the last report. 

Event[10745]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-16T21:09:47.9270000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 180978 seconds since the last report. 

Event[10746]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-16T21:09:47.9120000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 180978 seconds since the last report. 

Event[10747]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-16T21:09:47.9120000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 180978 seconds since the last report. 

Event[10748]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-16T21:09:47.9120000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 180978 seconds since the last report. 

Event[10749]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-16T21:09:47.9120000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 180978 seconds since the last report. 

Event[10750]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T19:49:41.3720000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[10751]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T19:49:08.9920000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 27 keys and creating 3 modified pages. 

Event[10752]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-16T19:16:03.7790000Z
  Event ID: 36
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. 

Event[10753]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-16T19:15:52.8390000Z
  Event ID: 33
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit. 

Event[10754]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-16T19:05:49.4170000Z
  Event ID: 33
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit. 

Event[10755]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T18:38:15.2150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 7 keys and creating 2 modified pages. 

Event[10756]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-16T16:41:10.9630000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10757]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-16T16:24:06.9580000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10758]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-16T16:07:02.9570000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10759]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-16T15:49:58.9550000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10760]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-16T15:32:38.9640000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[10761]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-16T15:32:38.9490000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[10762]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T15:32:33.7920000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\WINDOWS\System32\config\DRIVERS (TM: {d8cc90f9-b3be-11ee-8949-086ac578260b}, RM: {d8cc90f8-b3be-11ee-8949-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[10763]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T15:32:33.7640000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy4\WINDOWS\System32\config\SYSTEM (TM: {d8cc90f6-b3be-11ee-8949-086ac578260b}, RM: {d8cc90f5-b3be-11ee-8949-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[10764]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-16T15:20:06.2120000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10765]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T14:07:09.5420000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000120000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10766]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T14:07:09.5080000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10767]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T14:05:01.6840000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000120000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10768]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T14:05:01.6640000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10769]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T14:05:01.5430000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10770]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T14:05:01.5230000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10771]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T14:04:46.2770000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10772]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T14:04:46.2700000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10773]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T14:04:41.4740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10774]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T14:04:37.2660000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10775]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T14:00:26.0140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[10776]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-16T13:25:59.6740000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10777]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T13:25:54.7680000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Autodesk Access Service Host
Service File Name:  "C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[10778]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T13:13:02.7990000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl6d998e6c
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{AB3765D0-7C67-41F7-A67A-E8E9F67D99DA}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[10779]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-16T13:13:02.7400000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2235.0) - Current Channel (Broad) 

Event[10780]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-16T13:12:57.9240000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2235.0) - Current Channel (Broad) 

Event[10781]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-16T13:12:53.0170000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[10782]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:08:42.4070000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10783]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T13:08:42.3840000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[10784]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:06:38.6350000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10785]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:06:38.6170000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10786]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:06:38.5100000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10787]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:06:38.5000000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10788]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:06:34.3950000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10789]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:06:34.3750000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10790]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:06:34.2740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10791]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:06:34.2670000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10792]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-16T13:05:39.0910000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10793]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:05:37.8270000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10794]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:05:37.8150000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10795]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:05:37.7120000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10796]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:05:37.7050000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10797]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-16T13:05:07.3050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[10798]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:04:48.9520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10799]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:04:48.9420000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10800]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:04:48.8380000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10801]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:04:48.8240000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10802]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:04:36.8530000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10803]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:04:36.8370000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10804]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-16T13:04:36.7360000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[10805]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T13:03:42.2800000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?16T13:03:42.198741200Z from ?2024?-?01?-?16T13:03:42.198079000Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 42160).

RTC time: ?2024?-?01?-?16T13:03:42.198741200Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10806]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T13:03:42.1990000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10807]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T13:03:42.1980000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?16T13:03:42.116994700Z from ?2024?-?01?-?16T13:03:42.116090500Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 42160).

RTC time: ?2024?-?01?-?16T13:03:42.116994700Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10808]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T13:03:42.1170000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10809]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-16T13:03:42.1160000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[10810]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T13:03:42.1160000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?16T13:03:42.032727800Z from ?2024?-?01?-?16T13:03:47.208248800Z.
Time Delta: -5175 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 42160).

RTC time: ?2024?-?01?-?16T13:03:42.032727800Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10811]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T13:03:42.0330000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[10812]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-16T13:03:44.9110000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10813]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 33620. 

Event[10814]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 33620. 

Event[10815]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[10816]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[10817]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[10818]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[10819]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[10820]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[10821]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[10822]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[10823]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[10824]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{d9687eba-b0c3-11ee-8946-086ac578260b}" 

Event[10825]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[10826]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[10827]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[10828]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[10829]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[10830]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[10831]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[10832]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca0-31dd-9ba 

Event[10833]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 3; device name: \Volume{234e3a45-fca0-31dd-9bac-204183070f1e}. 

Event[10834]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[10835]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca0-31dd-9bac-204183070f1e}" created 

Event[10836]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[10837]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[10838]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[10839]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[10840]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[10841]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 3l 

Event[10842]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[10843]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[10844]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-16T13:03:31.7410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[10845]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-16T13:03:31.2170000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[10846]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-16T13:03:28.9350000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10847]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-16T13:03:23.7620000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10848]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-16T13:02:56.0880000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[10849]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T13:02:55.2890000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1026 keys and creating 60 modified pages. 

Event[10850]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-16T13:02:51.6230000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[10851]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-16T13:02:50.4820000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10852]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-16T13:02:50.4800000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[10853]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-16T13:02:50.2480000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[10854]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-16T13:02:50.0220000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 6 to 8.

Reason Unknown 

BootId: 8 

Event[10855]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-16T13:02:49.7600000Z
  Event ID: 134
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) 

Event[10856]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-16T13:02:49.7510000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 5 to 6.

Reason SxTransition 

BootId: 8 

Event[10857]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-16T13:02:49.7510000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[10858]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-16T13:02:49.7510000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[10859]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-16T13:02:49.7510000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[10860]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-16T13:02:49.4000000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[10861]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-16T13:02:49.0700000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[10862]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-16T13:02:48.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?16T13:02:48.500000000Z from ?2024?-?01?-?15T23:06:22.844962700Z.
Time Delta: 50185655 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?16T13:02:48.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10863]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T23:06:22.8450000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[10864]
  Log Name: System
  Source: EventLog
  Date: 2024-01-16T13:02:48.8410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 151838 seconds. 

Event[10865]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T23:06:18.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?15T23:06:18.500000000Z from ?2024?-?01?-?15T23:06:17.002987300Z.
Time Delta: 1497 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?15T23:06:18.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[10866]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T23:06:15.4300000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[10867]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T23:06:13.7040000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason Unknown 

BootId: 8 

Event[10868]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T23:06:13.7010000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[10869]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-15T23:06:13.1980000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[10870]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.8220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10871]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.8130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10872]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.8050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10873]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10874]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10875]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10876]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10877]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10878]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10879]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10880]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10881]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10882]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10883]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.7020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10884]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10885]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10886]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10887]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10888]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10889]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10890]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10891]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10892]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10893]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10894]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.6020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10895]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10896]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10897]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10898]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10899]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10900]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10901]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10902]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10903]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10904]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.5070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10905]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10906]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10907]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10908]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10909]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10910]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10911]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10912]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10913]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10914]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10915]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.4010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10916]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10917]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10918]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10919]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10920]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10921]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10922]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10923]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10924]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10925]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.3010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10926]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10927]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10928]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10929]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10930]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10931]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10932]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10933]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10934]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10935]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10936]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10937]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.2000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10938]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10939]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10940]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10941]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10942]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10943]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10944]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10945]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10946]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10947]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10948]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.1000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10949]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10950]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10951]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10952]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10953]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10954]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10955]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10956]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10957]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10958]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10959]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:08.0010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10960]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.9920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10961]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.9820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10962]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.9730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10963]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.9640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10964]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.9550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10965]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.9450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10966]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.9360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10967]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.9260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10968]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.8440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10969]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.8350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10970]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.8260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10971]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.8140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10972]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.8060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10973]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10974]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10975]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10976]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10977]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10978]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10979]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10980]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10981]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10982]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.7000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10983]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10984]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10985]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10986]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10987]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10988]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10989]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10990]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10991]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10992]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10993]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.6060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10994]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.5980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10995]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.5860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10996]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.5780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10997]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.5690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10998]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.5480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[10999]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.5360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11000]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.5030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11001]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.4820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11002]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.4720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11003]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.4580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11004]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.4450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11005]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T23:06:07.4330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11006]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[11007]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[11008]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[11009]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[11010]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[11011]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[11012]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[11013]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[11014]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[11015]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[11016]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" 

Event[11017]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[11018]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[11019]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[11020]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{296787b4-b317-11ee-8949-086ac578260b}" 

Event[11021]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[11022]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca3-31dd-9bac-2041830 

Event[11023]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[11024]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[11025]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T23:06:06.6100000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[11026]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T22:23:25.0600000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11027]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T22:21:20.8480000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11028]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T22:15:22.5430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[11029]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T21:44:50.2170000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11030]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T21:01:53.5100000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\GameraGame.DysonSphereProgram_2wj4xdcanw8jj\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[11031]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-15T21:00:47.7550000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[11032]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-15T21:00:43.3160000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[11033]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-15T21:00:43.3160000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[11034]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T18:12:33.7260000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000005). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11035]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T18:12:33.7100000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11036]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T18:10:10.6180000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000005). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11037]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T18:10:10.6130000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11038]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T18:10:05.7190000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11039]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T18:10:01.6070000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11040]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T16:50:18.3660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000004). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11041]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T16:50:18.3600000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11042]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T16:48:06.4770000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000004). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11043]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T16:48:06.4730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11044]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T16:48:06.3750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11045]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T16:48:06.3680000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11046]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T16:47:51.1820000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11047]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T16:47:51.1780000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11048]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T16:47:46.2790000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11049]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T16:47:42.1730000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11050]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T16:37:00.1160000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11051]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T16:06:20.7520000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11052]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T16:03:22.4240000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11053]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T15:33:16.7180000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[11054]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-15T15:26:52.7830000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11055]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-15T15:09:48.7830000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11056]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T15:04:04.6950000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11057]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-15T14:52:44.7830000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11058]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T14:42:11.9020000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11059]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-15T14:35:40.7820000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11060]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T14:32:46.6490000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11061]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T14:30:42.5420000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11062]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:15.4240000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\bfc27b3bb6d0d16c_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11063]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:15.4240000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11064]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:15.4230000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.PowerRenameContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11065]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:15.3850000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11066]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:15.3840000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 7 keys and creating 1 modified pages. 

Event[11067]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:15.3460000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.PowerToys.ImageResizerContextMenu_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\abc688e25d840df4_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11068]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:15.3450000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.ImageResizerContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11069]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:15.3440000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerToys.ImageResizerContextMenu_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11070]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:15.0590000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\WinRAR.ShellExtension_s4jet1zx4n14a\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\404089864fa344cb_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11071]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:14.9680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\a741c31b50079fb3_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11072]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:14.9670000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11073]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:23:14.9660000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11074]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-15T14:18:20.7910000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[11075]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-15T14:18:20.7770000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11076]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:18:20.3940000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[11077]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T14:08:43.4340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\24716aef7915c612_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11078]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T13:12:21.9630000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11079]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T13:12:21.9470000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11080]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T13:10:18.0790000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11081]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T13:10:18.0640000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11082]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T13:10:17.9630000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11083]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T13:10:17.9570000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11084]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T13:10:10.6100000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11085]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T13:10:10.6020000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11086]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T13:10:05.7560000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11087]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T13:10:01.5970000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11088]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T13:09:07.7400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11089]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T12:42:50.5940000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl49239af0
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9FB5D385-734C-4BC9-9E6F-E21B5F709DE3}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[11090]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-15T12:42:50.5850000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2184.0) - Current Channel (Broad) 

Event[11091]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-15T12:42:45.9410000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2184.0) - Current Channel (Broad) 

Event[11092]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-15T12:42:43.4570000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[11093]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-15T12:34:09.2990000Z
  Event ID: 4
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service stopped. 

Event[11094]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:32:38.0870000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11095]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T12:32:38.0660000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11096]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:30:34.2220000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11097]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:30:34.1980000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000003). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11098]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:30:34.0890000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000003). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11099]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:30:34.0800000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11100]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:30:00.8740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11101]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:30:00.8600000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11102]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:30:00.7570000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11103]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:30:00.7490000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11104]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:29:51.8120000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11105]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:29:51.8050000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000002). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11106]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:29:51.7010000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11107]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:29:51.6720000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11108]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T12:29:35.3200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[11109]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:29:15.3740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11110]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:29:15.3630000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11111]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-15T12:29:15.2600000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11112]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T12:28:54.1860000Z
  Event ID: 7034
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The EaseUS UPDATE SERVICE service terminated unexpectedly. It has done this 1 time(s). 

Event[11113]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T12:28:14.1030000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11114]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T12:28:05.5270000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11115]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T12:28:05.5020000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11116]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 50388. 

Event[11117]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 50388. 

Event[11118]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[11119]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[11120]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3610000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[11121]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[11122]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3600000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[11123]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[11124]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[11125]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[11126]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{296787b4-b317-11ee-8949-086ac578260b}" 

Event[11127]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[11128]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[11129]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[11130]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[11131]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[11132]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[11133]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[11134]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca3-31dd-9ba 

Event[11135]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 2; device name: \Volume{234e3a45-fca3-31dd-9bac-204183070f1e}. 

Event[11136]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[11137]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca3-31dd-9bac-204183070f1e}" created 

Event[11138]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[11139]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[11140]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[11141]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[11142]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[11143]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 2l 

Event[11144]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[11145]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[11146]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T12:28:03.3560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[11147]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T12:28:00.3480000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11148]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T12:27:59.9600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.OneDriveSync_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11149]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T12:27:58.1480000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11150]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T12:27:55.2200000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11151]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-15T12:27:26.5530000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[11152]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T12:27:25.9880000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11153]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T12:27:25.9860000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11154]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-15T12:27:25.8710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?15T00:07:18.603100300Z
Wake Time: ?2024?-?01?-?15T12:27:24.821807900Z

Wake Source: Unknown 

Event[11155]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-15T12:27:25.7430000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[11156]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-15T12:27:25.4470000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[11157]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T12:27:24.9140000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 2 to 4.

Reason Unknown 

BootId: 8 

Event[11158]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T12:27:24.7820000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 2.

Reason SxTransition 

BootId: 8 

Event[11159]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-15T12:27:24.7810000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[11160]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-15T12:27:24.7810000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[11161]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-15T12:27:24.7810000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[11162]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-15T12:27:24.0900000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[11163]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T12:27:23.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?15T12:27:23.500000000Z from ?2024?-?01?-?15T00:07:26.835771700Z.
Time Delta: 44396664 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?15T12:27:23.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[11164]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T00:07:26.8350000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[11165]
  Log Name: System
  Source: EventLog
  Date: 2024-01-15T12:27:23.8420000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 63313 seconds. 

Event[11166]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-15T00:07:21.4490000Z
  Event ID: 33
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit. 

Event[11167]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-15T00:07:21.4480000Z
  Event ID: 33
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit. 

Event[11168]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T00:07:20.3780000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[11169]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T00:07:18.6060000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason ScreenOffGracePeriod 

BootId: 8 

Event[11170]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-15T00:07:18.6030000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[11171]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-15T00:07:18.0610000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[11172]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11173]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11174]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11175]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11176]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11177]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11178]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11179]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11180]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11181]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.2090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11182]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11183]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11184]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11185]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11186]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11187]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11188]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11189]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11190]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11191]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.1060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11192]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.0940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11193]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.0830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11194]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.0700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11195]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.0580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11196]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.0400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11197]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.0310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11198]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.0180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11199]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:17.0090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11200]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11201]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11202]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11203]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11204]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11205]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11206]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11207]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11208]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11209]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11210]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.9060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11211]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11212]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11213]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11214]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11215]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11216]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11217]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11218]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11219]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11220]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11221]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11222]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.8000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11223]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11224]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11225]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11226]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11227]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11228]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11229]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11230]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11231]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11232]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.7040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11233]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11234]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11235]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11236]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11237]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11238]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11239]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11240]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11241]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11242]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11243]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11244]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.6020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11245]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11246]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11247]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11248]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11249]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11250]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11251]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11252]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11253]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11254]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11255]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.5060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11256]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11257]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11258]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11259]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11260]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11261]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11262]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11263]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11264]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11265]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.4070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11266]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.3980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11267]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.3880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11268]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.3800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11269]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:16.0340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11270]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11271]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11272]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11273]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11274]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11275]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11276]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11277]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11278]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11279]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11280]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.8040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11281]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11282]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11283]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11284]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11285]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11286]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11287]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11288]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11289]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11290]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11291]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.7040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11292]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11293]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11294]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11295]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11296]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11297]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11298]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11299]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11300]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11301]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11302]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.6020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11303]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.5920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11304]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.5820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11305]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.5710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11306]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.5620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11307]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.5520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11308]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.5390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11309]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.5270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11310]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.5150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11311]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.5050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11312]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.4940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11313]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.4790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11314]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-15T00:07:15.4630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11315]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[11316]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[11317]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[11318]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[11319]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[11320]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[11321]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[11322]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[11323]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[11324]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[11325]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[11326]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[11327]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{34fd08bb-b2e8-11ee-8948-086ac578260b}" 

Event[11328]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[11329]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[11330]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[11331]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[11332]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[11333]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-15T00:07:14.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[11334]
  Log Name: System
  Source: User32
  Date: 2024-01-15T00:07:11.2540000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: power off
 Comment:  

Event[11335]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-15T00:07:01.2240000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[11336]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-15T00:02:47.3030000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslbfe55c74
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{EB4A5AA9-F780-4A4C-A66A-1FCD1FE60932}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[11337]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-15T00:02:47.2710000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2162.0) - Current Channel (Broad) 

Event[11338]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-15T00:02:26.5920000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2162.0) - Current Channel (Broad) 

Event[11339]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-15T00:02:26.5920000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[11340]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T23:54:35.2500000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11341]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T23:52:24.2920000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11342]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T23:33:02.7440000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11343]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T23:30:58.4540000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11344]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T22:23:20.7660000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11345]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T22:21:16.4250000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11346]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T20:12:22.3590000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 11 keys and creating 1 modified pages. 

Event[11347]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:39:19.7500000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11348]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:37:39.9330000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_424.400.20.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11349]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T19:26:35.2240000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11350]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T19:25:01.8340000Z
  Event ID: 3
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Filter Manager failed to attach to volume '\Device\Harddisk5\DR6'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C. 

Event[11351]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T19:25:01.8340000Z
  Event ID: 3
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Filter Manager failed to attach to volume '\Device\Harddisk5\DR6'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C. 

Event[11352]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T19:24:43.6640000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FsDepends' (10.0, ?2056?-?03?-?07T17:54:55.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11353]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T19:24:39.8040000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy6\WINDOWS\System32\config\DRIVERS (TM: {05f99ead-b30e-11ee-8949-086ac578260b}, RM: {05f99eac-b30e-11ee-8949-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[11354]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T19:24:39.7810000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy6\WINDOWS\System32\config\SYSTEM (TM: {05f99ea9-b30e-11ee-8949-086ac578260b}, RM: {05f99ea8-b30e-11ee-8949-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[11355]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T19:24:31.1470000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11356]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-14T19:24:12.6230000Z
  Event ID: 3
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service started. 

Event[11357]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T19:20:30.6900000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11358]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T19:20:30.6800000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11359]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:18:38.7250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[11360]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T19:18:26.8110000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11361]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T19:18:26.8000000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11362]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T19:18:26.7020000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11363]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T19:18:26.6940000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11364]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T19:18:14.7350000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11365]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T19:18:14.7280000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11366]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T19:18:14.6260000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x18B8 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11367]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:17:32.1980000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11368]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:17:19.2780000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11369]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 31320. 

Event[11370]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 31320. 

Event[11371]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8930000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[11372]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[11373]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[11374]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[11375]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[11376]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[11377]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[11378]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{34fd08bb-b2e8-11ee-8948-086ac578260b}" 

Event[11379]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[11380]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[11381]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[11382]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[11383]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[11384]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[11385]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[11386]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[11387]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[11388]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[11389]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[11390]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[11391]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[11392]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[11393]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[11394]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[11395]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[11396]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[11397]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[11398]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[11399]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[11400]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T19:17:05.8880000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[11401]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:17:01.4950000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11402]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:17:01.4730000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11403]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:16:56.1610000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11404]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T19:16:51.4620000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11405]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:16:48.1760000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11406]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:16:14.4400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11407]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T19:16:14.4360000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11408]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-14T19:16:14.2460000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[11409]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-14T19:02:59.9320000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2148.0) - Current Channel (Broad) 

Event[11410]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T19:02:59.9270000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl75c98e93
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A127100B-362D-4142-88A9-89FDCB2E9E4E}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[11411]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-14T19:02:56.0440000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2148.0) - Current Channel (Broad) 

Event[11412]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-14T19:02:56.0440000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[11413]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T19:00:09.8130000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy6) is healthy.  No action is needed. 

Event[11414]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T19:00:09.7220000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy5) is healthy.  No action is needed. 

Event[11415]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T18:56:34.8690000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11416]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T18:55:02.4600000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl708e458b
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{65D4D002-8E96-405B-BE80-723E4CA92386}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[11417]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T18:54:31.4120000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11418]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T18:54:30.6190000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11419]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:54:30.2510000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/5ca32b59-6bd6-4947-a272-6b00b656b33e/) to URL group (0xFE00001220000001). Status: 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[11420]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:54:30.2510000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001220000001. Status 0x0. Process Id 0x1620 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[11421]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:53:29.2870000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11422]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:53:29.2870000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11423]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:53:29.2870000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11424]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:53:29.2870000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11425]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:53:29.2720000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11426]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:53:29.2720000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11427]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:53:29.2720000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11428]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:53:29.2720000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11429]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T18:52:39.1120000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[11430]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-14T18:52:32.6970000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[11431]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-14T18:52:32.5390000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[11432]
  Log Name: System
  Source: TPM
  Date: 2024-01-14T18:52:31.7130000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[11433]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:31.6960000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11434]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T18:52:30.1310000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[11435]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-14T18:52:30.0080000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[11436]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.9920000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000D20000001). Status: 0x0. Process Id 0xD04 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[11437]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.9920000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000D20000001. Status 0x0. Process Id 0xD04 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[11438]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-14T18:52:29.9520000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[11439]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11440]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11441]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11442]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11443]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11444]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11445]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11446]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11447]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11448]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11449]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11450]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11451]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11452]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11453]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11454]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11455]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T18:52:29.8980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11456]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-14T18:52:28.7110000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[11457]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-14T18:52:28.7050000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[11458]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-14T18:52:28.7050000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[11459]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-14T18:52:28.7050000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[11460]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:28.6900000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11461]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:28.6860000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11462]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:28.6810000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11463]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:28.6810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[11464]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:28.6810000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11465]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:28.6770000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11466]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:28.6690000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11467]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:28.6640000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11468]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-14T18:52:27.5630000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[11469]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-14T18:52:27.5630000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[11470]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-14T18:52:27.5590000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[11471]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.5510000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[11472]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.5510000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[11473]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.5400000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[11474]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.5360000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[11475]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.5220000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[11476]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.5200000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[11477]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.5180000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[11478]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.5120000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[11479]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.5030000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[11480]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.4990000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[11481]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T18:52:27.4840000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[11482]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-14T18:52:27.4610000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[11483]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-14T18:52:27.4610000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[11484]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-14T18:52:25.8970000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[11485]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T18:52:25.5330000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[11486]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T18:52:25.0750000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[11487]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T18:52:24.8030000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[11488]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T18:52:23.4990000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[11489]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T18:52:23.2290000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[11490]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T18:52:22.1830000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[11491]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-14T18:52:20.8990000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[11492]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-14T18:52:19.0820000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[11493]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-14T18:52:18.4750000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[11494]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T18:52:18.2860000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11495]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T18:52:18.2860000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11496]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T18:52:18.2230000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11497]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T18:52:18.2230000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11498]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T18:52:18.2070000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11499]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T18:52:18.1920000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[11500]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-14T18:52:18.1920000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[11501]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-14T18:52:18.1290000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[11502]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[11503]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1350000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11504]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1350000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11505]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11506]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11507]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11508]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1260000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[11509]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1250000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11510]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[11511]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[11512]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[11513]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[11514]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1090000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11515]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1090000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[11516]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[11517]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[11518]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.1000000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[11519]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.0990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11520]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.0950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11521]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.0950000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11522]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.0930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11523]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.0930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11524]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.0920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 40
Minimum throttle percentage: 2 

Event[11525]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T18:52:18.0780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[11526]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-14T18:52:17.6430000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[11527]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-14T18:52:17.6320000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[11528]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-14T18:52:17.6300000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[11529]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:17.6010000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11530]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:17.5060000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11531]
  Log Name: System
  Source: volmgr
  Date: 2024-01-14T18:52:17.4680000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[11532]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T18:52:17.4060000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[11533]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:12.6610000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11534]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:12.6600000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11535]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T18:52:12.6590000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11536]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-14T18:52:11.1380000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[11537]
  Log Name: System
  Source: EventLog
  Date: 2024-01-14T18:52:28.8170000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 18 seconds. 

Event[11538]
  Log Name: System
  Source: EventLog
  Date: 2024-01-14T18:52:28.8170000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[11539]
  Log Name: System
  Source: EventLog
  Date: 2024-01-14T18:52:28.8170000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[11540]
  Log Name: System
  Source: EventLog
  Date: 2024-01-14T18:52:28.8160000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 18:21:45 on ?14/?01/?2024 was unexpected. 

Event[11541]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T18:52:11.0820000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[11542]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T18:52:11.0770000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[11543]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T18:52:11.0770000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[11544]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T18:52:11.0770000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[11545]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T18:52:11.0770000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?14T18:52:10.000000000Z. 

Event[11546]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T18:52:11.0770000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[11547]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T18:52:11.0770000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[11548]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T18:52:11.0770000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[11549]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T18:52:11.0770000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[11550]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T18:52:11.0770000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?14T18:52:10.500000000Z. 

Event[11551]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T18:05:06.7500000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy4) is healthy.  No action is needed. 

Event[11552]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T17:09:16.0670000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11553]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T17:09:08.2890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11554]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T17:09:01.2640000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11555]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T16:50:17.4240000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\b1fe044054a995b7_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11556]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T16:50:17.4190000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11557]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T16:50:17.4160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj\SystemAppData\Helium\User.dat was cleared updating 15 keys and creating 1 modified pages. 

Event[11558]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T16:18:27.6620000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11559]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:57:37.0830000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000001). Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11560]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T15:57:37.0640000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11561]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:55:25.2220000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11562]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:55:25.2100000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000002). Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11563]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:55:25.1040000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000002). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11564]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:55:25.0950000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11565]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:55:01.6120000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11566]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:55:01.6050000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001420000001). Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11567]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:54:56.7760000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001420000001). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11568]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T15:54:52.5980000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11569]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:51:55.9170000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_424.400.20.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11570]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:50:06.7090000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[11571]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-14T15:40:51.2090000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11572]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T15:35:16.2430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.OneDriveSync_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\b10ff7f29dc102c2_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[11573]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T15:34:51.1000000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[11574]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:33:59.2310000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11575]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T15:33:59.2130000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11576]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:32:03.6560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[11577]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:31:47.3330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11578]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:31:47.3270000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11579]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:31:47.2330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11580]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:31:47.2220000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11581]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:31:31.2840000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11582]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:31:31.2780000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00000C20000001). Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11583]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T15:31:31.1720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00000C20000001). Status: 0x0. Process Id 0x1574 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11584]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:30:34.2020000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11585]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:30:25.7920000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11586]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:30:25.7640000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11587]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 30952. 

Event[11588]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 30952. 

Event[11589]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[11590]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[11591]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[11592]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[11593]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3640000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[11594]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3640000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[11595]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[11596]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[11597]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[11598]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{34fd08bb-b2e8-11ee-8948-086ac578260b}" 

Event[11599]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[11600]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[11601]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[11602]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[11603]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[11604]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[11605]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[11606]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3630000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[11607]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[11608]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[11609]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[11610]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[11611]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[11612]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[11613]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[11614]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[11615]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[11616]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[11617]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[11618]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T15:30:20.3620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[11619]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:30:19.2190000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11620]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:30:16.7790000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11621]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T15:30:15.4270000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11622]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-14T15:30:07.9320000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Windows\explorer.exe (process ID:20844) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[11623]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:30:06.6080000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11624]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T15:29:49.3250000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\UserClasses.dat was cleared updating 25 keys and creating 2 modified pages. 

Event[11625]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T15:29:49.3230000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\SystemAppData\Helium\User.dat was cleared updating 37 keys and creating 4 modified pages. 

Event[11626]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:29:48.6350000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11627]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T15:29:48.6310000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11628]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T15:29:48.4480000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 15364 keys and creating 1490 modified pages. 

Event[11629]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T15:29:48.4150000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\ntuser.dat was cleared updating 9052 keys and creating 1188 modified pages. 

Event[11630]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-14T15:29:48.3890000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[11631]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-14T15:23:47.2050000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11632]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-14T15:06:43.1970000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11633]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-14T14:49:39.1960000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11634]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:35:47.3430000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11635]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:34:11.3890000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from auto start to demand start. 

Event[11636]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:33:43.2630000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11637]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:33:37.4690000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\WINDOWS\System32\SMI\Store\Machine\SCHEMA.DAT was reorganized with a starting size of 12185600 bytes and an ending size of 10776576 bytes. 

Event[11638]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:33:37.1880000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\WINDOWS\System32\config\COMPONENTS was reorganized with a starting size of 57212928 bytes and an ending size of 55578624 bytes. 

Event[11639]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:33:21.2970000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from demand start to auto start. 

Event[11640]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:33:21.0520000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from auto start to demand start. 

Event[11641]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:33:19.6880000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from demand start to auto start. 

Event[11642]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:33:19.6670000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from auto start to demand start. 

Event[11643]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:33:19.5570000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from demand start to auto start. 

Event[11644]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:33:19.3130000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from auto start to demand start. 

Event[11645]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:33:19.1710000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from demand start to auto start. 

Event[11646]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-14T14:32:19.1970000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[11647]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-14T14:32:19.1850000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[11648]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-14T14:32:11.8970000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2141.0) - Current Channel (Broad) 

Event[11649]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:32:11.8510000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl8a7c1bc0
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{65D4D002-8E96-405B-BE80-723E4CA92386}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[11650]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-14T14:32:07.8770000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2141.0) - Current Channel (Broad) 

Event[11651]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-14T14:31:58.9880000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[11652]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:25:37.7960000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11653]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:24:21.4260000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl1be4604a
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{30FAC5A6-4A29-4219-8FA7-1B2655B042B6}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[11654]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T14:23:51.8890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11655]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:23:48.8990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/5c8cbfdd-13ad-4e54-b296-d921c2184c28/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x17E8 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[11656]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:23:48.8980000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001420000001. Status 0x0. Process Id 0x17E8 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[11657]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:23:28.5050000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11658]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:22:48.3740000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11659]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:22:48.3740000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11660]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:22:48.3740000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11661]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:22:48.3740000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11662]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:22:48.3580000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11663]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:22:48.3580000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11664]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:22:48.3580000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11665]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:22:48.3580000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[11666]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:21:58.7410000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[11667]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-14T14:21:52.7380000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[11668]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-14T14:21:52.6070000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[11669]
  Log Name: System
  Source: TPM
  Date: 2024-01-14T14:21:50.8520000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[11670]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T14:21:50.8510000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[11671]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:49.7580000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11672]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-14T14:21:48.6910000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[11673]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.6710000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFF00000C20000001). Status: 0x0. Process Id 0x1888 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[11674]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.6710000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFF00000C20000001. Status 0x0. Process Id 0x1888 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[11675]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-14T14:21:48.6360000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[11676]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11677]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11678]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11679]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11680]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11681]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11682]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11683]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11684]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11685]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11686]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11687]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11688]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11689]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11690]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11691]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5830000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11692]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T14:21:48.5820000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[11693]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:45.8430000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 5369856 bytes and an ending size of 5255168 bytes. 

Event[11694]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-14T14:21:45.5790000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[11695]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-14T14:21:45.5690000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[11696]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-14T14:21:45.5690000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[11697]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-14T14:21:45.5690000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[11698]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:45.5480000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11699]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:45.5430000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11700]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:45.5350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11701]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:45.5350000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[11702]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:45.5350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11703]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:45.5260000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11704]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:45.4810000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11705]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:45.4720000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11706]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:45.4210000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 418 keys and creating 90 modified pages. 

Event[11707]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:45.2660000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 740 keys and creating 38 modified pages. 

Event[11708]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T14:21:44.8230000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[11709]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:44.5540000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 742 keys and creating 49 modified pages. 

Event[11710]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-14T14:21:44.5090000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[11711]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-14T14:21:44.5090000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[11712]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-14T14:21:44.5050000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[11713]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4970000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[11714]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4960000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[11715]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4850000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[11716]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4820000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[11717]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4680000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[11718]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4660000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[11719]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4640000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[11720]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4590000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[11721]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4490000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[11722]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4450000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[11723]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-14T14:21:44.4300000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[11724]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-14T14:21:44.4070000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[11725]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-14T14:21:44.4070000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[11726]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-14T14:21:42.8080000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[11727]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:42.4370000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[11728]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:42.3920000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 167829504 bytes and an ending size of 161996800 bytes. 

Event[11729]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:40.6960000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 95 keys and creating 4 modified pages. 

Event[11730]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:40.6930000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 886 keys and creating 73 modified pages. 

Event[11731]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:40.6910000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 80 keys and creating 8 modified pages. 

Event[11732]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T14:21:40.6740000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[11733]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T14:21:40.5460000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[11734]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T14:21:40.3050000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[11735]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-14T14:21:40.1780000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[11736]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T14:21:39.2440000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[11737]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-14T14:21:38.3610000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[11738]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-14T14:21:37.5510000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[11739]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T14:21:37.3730000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11740]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T14:21:37.3730000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11741]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T14:21:37.3100000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11742]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T14:21:37.3100000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11743]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T14:21:37.2940000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[11744]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-14T14:21:37.2780000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[11745]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-14T14:21:37.2780000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[11746]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-14T14:21:37.2160000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[11747]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2220000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11748]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2210000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11749]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2200000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11750]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11751]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11752]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11753]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2110000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11754]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2100000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[11755]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11756]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.2030000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11757]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1990000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11758]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11759]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11760]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11761]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11762]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1890000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11763]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11764]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11765]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11766]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11767]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11768]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11769]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1780000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[11770]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-14T14:21:37.1650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[11771]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-14T14:21:36.7100000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[11772]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-14T14:21:36.6990000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[11773]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-14T14:21:36.6930000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[11774]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:36.6420000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11775]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:36.4600000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11776]
  Log Name: System
  Source: volmgr
  Date: 2024-01-14T14:21:36.3770000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[11777]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-14T14:21:36.0330000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[11778]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:30.6900000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11779]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:30.6890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11780]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-14T14:21:30.6880000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[11781]
  Log Name: System
  Source: EventLog
  Date: 2024-01-14T14:21:45.8930000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 17 seconds. 

Event[11782]
  Log Name: System
  Source: EventLog
  Date: 2024-01-14T14:21:45.8920000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[11783]
  Log Name: System
  Source: EventLog
  Date: 2024-01-14T14:21:45.8920000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[11784]
  Log Name: System
  Source: EventLog
  Date: 2024-01-14T14:21:45.8920000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 13:59:17 on ?14/?01/?2024 was unexpected. 

Event[11785]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-14T14:21:29.1560000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[11786]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:29.1030000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[11787]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T14:21:29.0980000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[11788]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T14:21:29.0980000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[11789]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T14:21:29.0980000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[11790]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T14:21:29.0980000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?14T14:21:28.000000000Z. 

Event[11791]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T14:21:29.0970000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[11792]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T14:21:29.0970000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[11793]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T14:21:29.0970000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[11794]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T14:21:29.0970000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[11795]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T14:21:29.0970000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?14T14:21:28.500000000Z. 

Event[11796]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-14T13:03:47.0340000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 11 to 12.

Reason SessionUnlock 

BootId: 6 

Event[11797]
  Log Name: System
  Source: EventLog
  Date: 2024-01-14T12:00:00.8420000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 146198 seconds. 

Event[11798]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T11:08:04.6250000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl7fe5da48
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{30FAC5A6-4A29-4219-8FA7-1B2655B042B6}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[11799]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-14T11:08:04.5790000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2136.0) - Current Channel (Broad) 

Event[11800]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-14T11:07:59.3940000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2136.0) - Current Channel (Broad) 

Event[11801]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-14T11:07:58.4150000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[11802]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T11:03:41.1040000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_424.400.20.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11803]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:47:25.9310000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001420000006). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11804]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T10:47:25.9030000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[11805]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T10:45:46.9500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[11806]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:45:22.0300000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001420000006). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11807]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:45:22.0200000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00001520000004). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11808]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:45:21.9200000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00001520000004). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11809]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:45:21.9130000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000004). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11810]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:45:13.9670000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000004). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11811]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:45:13.9590000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001420000005). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11812]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:45:13.8420000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001420000005). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11813]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:45:13.8350000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00001520000003). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11814]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:44:57.2480000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00001520000003). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11815]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:44:57.2390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001420000004). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11816]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-14T10:44:57.1390000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001420000004). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[11817]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T10:44:32.2160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[11818]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T10:44:17.0320000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11819]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T10:44:06.7340000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11820]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T10:44:05.7930000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11821]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T10:44:05.7670000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11822]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 23476. 

Event[11823]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 23476. 

Event[11824]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[11825]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[11826]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[11827]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[11828]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[11829]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[11830]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[11831]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[11832]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3450000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[11833]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{d9687eba-b0c3-11ee-8946-086ac578260b}" 

Event[11834]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[11835]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[11836]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[11837]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[11838]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[11839]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[11840]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[11841]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca0-31dd-9ba 

Event[11842]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 3; device name: \Volume{234e3a45-fca0-31dd-9bac-204183070f1e}. 

Event[11843]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[11844]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca0-31dd-9bac-204183070f1e}" created 

Event[11845]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[11846]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[11847]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[11848]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[11849]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[11850]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 3l 

Event[11851]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[11852]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[11853]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-14T10:44:02.3440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[11854]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T10:44:00.6480000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11855]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-14T10:43:56.7150000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[11856]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T10:43:53.6200000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11857]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T10:43:36.3680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[11858]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T10:43:30.4820000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\UserClasses.dat was cleared updating 12 keys and creating 1 modified pages. 

Event[11859]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T10:43:30.4810000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\SystemAppData\Helium\User.dat was cleared updating 25 keys and creating 4 modified pages. 

Event[11860]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T10:43:30.1810000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 71 keys and creating 10 modified pages. 

Event[11861]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T10:43:25.9780000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 10 keys and creating 1 modified pages. 

Event[11862]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T10:43:25.7960000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\Settings\settings.dat was cleared updating 89 keys and creating 10 modified pages. 

Event[11863]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-14T10:43:25.5480000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[11864]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T10:43:24.8860000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11865]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-14T10:43:24.8680000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[11866]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T10:43:24.8040000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \Device\HarddiskVolume7\EFI\Microsoft\Boot\BCD was cleared updating 235 keys and creating 11 modified pages. 

Event[11867]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-14T10:43:24.7780000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?13T23:57:51.445204200Z
Wake Time: ?2024?-?01?-?14T10:43:24.095307400Z

Wake Source: Unknown 

Event[11868]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-14T10:43:24.4750000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[11869]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-14T10:43:24.1930000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 9 to 11.

Reason Unknown 

BootId: 6 

Event[11870]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-14T10:43:23.7460000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 8 to 9.

Reason SxTransition 

BootId: 6 

Event[11871]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T10:43:23.7460000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[11872]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T10:43:23.7460000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[11873]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-14T10:43:23.7460000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[11874]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-14T10:43:23.6260000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[11875]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-14T10:43:23.1040000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[11876]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-14T10:43:22.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?14T10:43:22.500000000Z from ?2024?-?01?-?13T23:57:57.449531000Z.
Time Delta: 38725050 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?14T10:43:22.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[11877]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T23:57:57.4490000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[11878]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T23:57:52.5960000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[11879]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T23:57:51.4470000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 7 to 8.

Reason InputAccelerometer 

BootId: 6 

Event[11880]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T23:57:51.4450000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[11881]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-13T23:57:50.8830000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[11882]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11883]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11884]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11885]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11886]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11887]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11888]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11889]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11890]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11891]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11892]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.3020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11893]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11894]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11895]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11896]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11897]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11898]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11899]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11900]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11901]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11902]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11903]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.2070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11904]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11905]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11906]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11907]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11908]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11909]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11910]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11911]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11912]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11913]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11914]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11915]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.1050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11916]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11917]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11918]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11919]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11920]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11921]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11922]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11923]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11924]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11925]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11926]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:46.0070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11927]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11928]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11929]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11930]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11931]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11932]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11933]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11934]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11935]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11936]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11937]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.9030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11938]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11939]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11940]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11941]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11942]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11943]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11944]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11945]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11946]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11947]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11948]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11949]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11950]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11951]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.8020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11952]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11953]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11954]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11955]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11956]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11957]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11958]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11959]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11960]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11961]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.7070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11962]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11963]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11964]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11965]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11966]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11967]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11968]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11969]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11970]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11971]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11972]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11973]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.6060000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11974]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11975]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11976]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11977]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11978]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11979]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11980]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11981]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11982]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11983]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11984]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11985]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.5020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11986]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.4930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11987]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.4810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11988]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.3460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11989]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.1560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11990]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.1490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11991]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.1410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11992]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.1330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11993]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.1250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11994]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.1170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11995]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.1070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11996]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.0980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11997]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.0400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11998]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:45.0310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[11999]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:44.9600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12000]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:44.9490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12001]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:44.9360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12002]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T23:57:44.9210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12003]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[12004]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[12005]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[12006]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[12007]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[12008]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[12009]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[12010]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[12011]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[12012]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[12013]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" 

Event[12014]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[12015]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[12016]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[12017]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2130000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{0d8b3bd0-b180-11ee-8947-086ac578260b}" 

Event[12018]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[12019]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca3-31dd-9bac-2041830 

Event[12020]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[12021]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[12022]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T23:57:44.2120000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[12023]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T23:44:59.3810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?13T23:44:59.299595100Z from ?2024?-?01?-?13T23:44:59.299163600Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 26068).

RTC time: ?2024?-?01?-?13T23:44:59.299595100Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12024]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T23:44:59.2990000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[12025]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T23:44:59.2990000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?13T23:44:59.215598000Z from ?2024?-?01?-?13T23:44:59.215140200Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 26068).

RTC time: ?2024?-?01?-?13T23:44:59.215598000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12026]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T23:44:59.2150000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[12027]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-13T23:44:59.2150000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[12028]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T23:44:59.2150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?13T23:44:59.127039400Z from ?2024?-?01?-?13T23:45:00.616082300Z.
Time Delta: -1489 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 26068).

RTC time: ?2024?-?01?-?13T23:44:59.127039400Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12029]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T23:44:59.1270000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[12030]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-13T23:44:44.6190000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[12031]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T23:33:02.5100000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12032]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T23:30:58.2000000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12033]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T22:23:16.3200000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12034]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T22:21:12.0160000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12035]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T22:18:23.6450000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000B20000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12036]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T22:18:23.6020000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12037]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T22:16:04.4460000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000B20000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12038]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T22:16:04.4330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12039]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T22:15:59.6140000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12040]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T22:15:55.4280000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12041]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T20:01:42.8110000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12042]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T19:45:36.4130000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[12043]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T19:45:36.4120000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\SystemAppData\Helium\User.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[12044]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T19:43:42.9470000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 5 to 7.

Reason InputAccelerometer 

BootId: 6 

Event[12045]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T18:59:27.4080000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001420000003). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12046]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T18:59:27.3440000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12047]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T18:57:19.5250000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001420000003). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12048]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T18:57:19.5020000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000003). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12049]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T18:57:19.3960000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000003). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12050]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T18:57:19.3830000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12051]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T18:56:59.9140000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12052]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T18:56:59.8970000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12053]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T18:56:55.2770000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12054]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T18:56:50.8930000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12055]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T18:09:33.1280000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12056]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T18:07:28.8170000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12057]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T16:32:02.1580000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason SessionUnlock 

BootId: 6 

Event[12058]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-13T15:47:08.6020000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12059]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-13T15:30:04.5970000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12060]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-13T15:13:00.5940000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12061]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-13T14:55:56.5890000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12062]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T14:42:25.2120000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12063]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T14:40:20.9810000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12064]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T14:38:50.6610000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12065]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-13T14:38:36.5890000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[12066]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-13T14:38:36.5770000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12067]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T14:15:07.4940000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12068]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T14:07:36.1500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[12069]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:59:51.0090000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12070]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T12:59:50.9930000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12071]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:57:47.1370000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12072]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:57:47.1170000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00001520000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12073]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:57:47.0140000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00001520000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12074]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:57:47.0060000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12075]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:56:59.6410000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12076]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:56:59.6260000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000920000003). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12077]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:56:54.7400000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000920000003). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12078]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T12:56:50.6190000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12079]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T12:31:22.3100000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl9fccc264
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D02ED477-A57E-4544-A248-D6E7D6E62EE9}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12080]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T12:31:22.2760000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2085.0) - Current Channel (Broad) 

Event[12081]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T12:31:17.1480000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2085.0) - Current Channel (Broad) 

Event[12082]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T12:31:05.9320000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12083]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T12:31:00.3070000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12084]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T12:30:55.4860000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12085]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T12:30:55.4860000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12086]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T12:18:30.6890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_424.400.20.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12087]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:18:15.6460000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000B20000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12088]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T12:18:15.6160000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12089]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:16:11.7580000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000B20000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12090]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:16:11.7390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001420000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12091]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:16:11.6360000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001420000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12092]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:16:11.6300000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFD00001520000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12093]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:16:04.4210000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFD00001520000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12094]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:16:04.4040000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12095]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T12:15:59.5400000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12096]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T12:15:55.3980000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12097]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T12:14:57.2400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12098]
  Log Name: System
  Source: EventLog
  Date: 2024-01-13T12:00:00.8400000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 59797 seconds. 

Event[12099]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T11:59:06.4730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000920000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12100]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T11:59:06.4410000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12101]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T11:57:23.4170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[12102]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T11:57:02.5580000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000920000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12103]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T11:57:02.5500000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000920000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12104]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T11:57:02.4470000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000920000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12105]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T11:57:02.4410000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12106]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T11:56:50.5160000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12107]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T11:56:50.4970000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001420000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12108]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-13T11:56:50.3880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001420000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12109]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T11:55:56.0000000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12110]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T11:55:51.6800000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12111]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T11:55:51.6530000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12112]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T11:55:45.8830000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12113]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T11:55:45.7670000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Steam Client Service service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion. 

Event[12114]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T11:55:45.7670000Z
  Event ID: 7009
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect. 

Event[12115]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 29956. 

Event[12116]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 29956. 

Event[12117]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[12118]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[12119]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[12120]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[12121]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[12122]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7940000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[12123]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7900000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[12124]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[12125]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[12126]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{0d8b3bd0-b180-11ee-8947-086ac578260b}" 

Event[12127]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[12128]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[12129]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[12130]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[12131]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[12132]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[12133]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[12134]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca3-31dd-9ba 

Event[12135]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 2; device name: \Volume{234e3a45-fca3-31dd-9bac-204183070f1e}. 

Event[12136]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[12137]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca3-31dd-9bac-204183070f1e}" created 

Event[12138]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[12139]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[12140]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[12141]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[12142]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[12143]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 2l 

Event[12144]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[12145]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[12146]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T11:55:40.7890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[12147]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T11:55:34.5310000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12148]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-13T11:55:09.5400000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[12149]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T11:55:09.0400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12150]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-13T11:55:09.0290000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12151]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-13T11:55:08.8710000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?13T00:44:46.365698400Z
Wake Time: ?2024?-?01?-?13T11:55:07.819069100Z

Wake Source: Unknown 

Event[12152]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-13T11:55:08.6190000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[12153]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T11:55:08.1370000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 2 to 4.

Reason Unknown 

BootId: 6 

Event[12154]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T11:55:07.7550000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 2.

Reason SxTransition 

BootId: 6 

Event[12155]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-13T11:55:07.7540000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[12156]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-13T11:55:07.7540000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[12157]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-13T11:55:07.7540000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[12158]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-13T11:55:07.4020000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[12159]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-13T11:55:07.0860000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[12160]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T11:55:06.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?13T11:55:06.500000000Z from ?2024?-?01?-?13T00:44:51.832926900Z.
Time Delta: 40214667 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?13T11:55:06.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12161]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T00:44:51.8330000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[12162]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T00:44:46.9340000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[12163]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-13T00:44:46.5870000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[12164]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T00:44:46.3780000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason ScreenOffGracePeriod 

BootId: 6 

Event[12165]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-13T00:44:46.3650000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[12166]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-13T00:44:46.0330000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[12167]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[12168]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[12169]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[12170]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[12171]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[12172]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[12173]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[12174]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[12175]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[12176]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[12177]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[12178]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[12179]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[12180]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[12181]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{0d8b3655-b180-11ee-8947-086ac578260b}" 

Event[12182]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[12183]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[12184]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[12185]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[12186]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-13T00:44:39.5240000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[12187]
  Log Name: System
  Source: User32
  Date: 2024-01-13T00:44:36.0150000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: power off
 Comment:  

Event[12188]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T00:43:22.1720000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12189]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-13T00:14:08.3430000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl4b68c015
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{54831797-7D50-4BDD-B225-304E4BDB563E}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12190]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T00:14:08.3320000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2058.0) - Current Channel (Broad) 

Event[12191]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T00:14:03.5010000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2058.0) - Current Channel (Broad) 

Event[12192]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-13T00:14:03.5010000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12193]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T23:33:02.5370000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12194]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T23:30:58.2080000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12195]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T22:23:11.8960000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12196]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T22:21:07.6300000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12197]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T22:05:05.0420000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12198]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T22:05:05.0190000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12199]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T22:02:57.2020000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12200]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T22:02:57.1780000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12201]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T22:02:57.0550000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12202]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T22:02:57.0380000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12203]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T22:02:45.5590000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12204]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T22:02:45.5420000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12205]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T22:02:40.9460000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12206]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T22:02:36.5360000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12207]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T21:05:35.4330000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12208]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:06:36.4830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[12209]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:05:21.2250000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12210]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T20:05:21.2130000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12211]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T20:03:18.9730000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\cb68a5e627a2c7e4_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[12212]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T20:03:18.9330000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.XboxGamingOverlay_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 7 keys and creating 2 modified pages. 

Event[12213]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T20:03:18.7900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[12214]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:03:17.3800000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12215]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:03:17.3530000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000003). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12216]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:03:17.2440000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000003). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12217]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:03:17.2350000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12218]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:02:44.5970000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12219]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:02:44.5850000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000002). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12220]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:02:44.4740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000002). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12221]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:02:44.4570000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12222]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:02:36.4750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12223]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:02:36.4600000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12224]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:02:36.3630000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12225]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:02:36.3580000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001320000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12226]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:01:45.6160000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12227]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:01:45.6020000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12228]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T20:01:45.4520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x6F44 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12229]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T20:01:39.0250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12230]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T20:01:21.2980000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12231]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T20:01:21.2730000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12232]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 31424. 

Event[12233]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 31424. 

Event[12234]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[12235]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2340000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[12236]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2330000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[12237]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2330000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[12238]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2330000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[12239]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2330000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[12240]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[12241]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[12242]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[12243]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{0d8b3655-b180-11ee-8947-086ac578260b}" 

Event[12244]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[12245]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[12246]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[12247]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[12248]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[12249]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[12250]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[12251]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[12252]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[12253]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[12254]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[12255]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[12256]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[12257]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[12258]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[12259]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[12260]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[12261]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[12262]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[12263]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T20:01:17.2290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[12264]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T20:01:14.0140000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12265]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T20:01:09.0890000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12266]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T20:01:04.6600000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12267]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T20:00:53.9140000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12268]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T20:00:41.0990000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.YourPhone_8wekyb3d8bbwe\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\d0fa7d747c2340b8_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[12269]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T20:00:33.2530000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12270]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T20:00:33.2480000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12271]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-12T20:00:33.0400000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[12272]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T19:33:56.6780000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2043.0) - Current Channel (Broad) 

Event[12273]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T19:33:56.6730000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslbe24e0ca
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8B986ECA-361B-4140-B548-8FCF45FF6C23}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12274]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T19:33:52.7000000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2043.0) - Current Channel (Broad) 

Event[12275]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T19:33:51.1620000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12276]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T19:26:12.3940000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsla2585ac1
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{16F922AC-4B86-48A9-812B-B290A531730D}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12277]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T19:25:43.8780000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12278]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:25:40.0450000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/8cf4338b-bc76-44e6-a866-1b76f60c29dd/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x1720 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[12279]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:25:40.0450000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001420000001. Status 0x0. Process Id 0x1720 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[12280]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:24:42.4310000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[12281]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:24:42.4310000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[12282]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:24:42.4310000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[12283]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:24:42.4310000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[12284]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:24:42.4150000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[12285]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:24:42.4150000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[12286]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:24:42.4150000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[12287]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:24:42.4150000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[12288]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T19:23:49.7590000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12289]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-12T19:23:45.3440000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[12290]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-12T19:23:45.1900000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[12291]
  Log Name: System
  Source: TPM
  Date: 2024-01-12T19:23:44.6940000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[12292]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T19:23:42.7150000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[12293]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:41.4520000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12294]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-12T19:23:39.9240000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[12295]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFF00001020000001). Status: 0x0. Process Id 0x1610 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[12296]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8880000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFF00001020000001. Status 0x0. Process Id 0x1610 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[12297]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-12T19:23:39.8730000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[12298]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12299]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12300]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12301]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12302]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12303]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12304]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12305]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12306]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12307]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12308]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12309]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12310]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12311]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12312]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12313]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12314]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T19:23:39.8010000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[12315]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T19:23:38.6310000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\bbimigrate\BBI was cleared updating 407 keys and creating 91 modified pages. 

Event[12316]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-12T19:23:38.6240000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[12317]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-12T19:23:38.6180000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[12318]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-12T19:23:38.6180000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[12319]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-12T19:23:38.6180000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[12320]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:38.6000000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12321]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:38.5970000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12322]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:38.5920000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12323]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:38.5920000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[12324]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:38.5920000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12325]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:38.5880000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12326]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:38.5800000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12327]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:38.5760000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12328]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-12T19:23:37.9610000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[12329]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-12T19:23:37.6310000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[12330]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-12T19:23:37.6310000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[12331]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-12T19:23:37.6260000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[12332]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.6190000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[12333]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.6180000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[12334]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.6060000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[12335]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.6030000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[12336]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.5890000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[12337]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.5870000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[12338]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.5850000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[12339]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.5800000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[12340]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.5690000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[12341]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.5650000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[12342]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-12T19:23:37.5500000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[12343]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-12T19:23:37.5270000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[12344]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-12T19:23:37.5270000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[12345]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-12T19:23:35.7890000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[12346]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T19:23:35.4080000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[12347]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-12T19:23:34.7350000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[12348]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-12T19:23:34.5890000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[12349]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-12T19:23:34.3150000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[12350]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-12T19:23:34.0480000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[12351]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-12T19:23:33.2310000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[12352]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-12T19:23:32.4310000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[12353]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-12T19:23:31.6190000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[12354]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-12T19:23:31.4290000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[12355]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-12T19:23:31.4290000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[12356]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-12T19:23:31.3660000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[12357]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-12T19:23:31.3660000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[12358]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-12T19:23:31.3510000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[12359]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-12T19:23:31.3350000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[12360]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-12T19:23:31.3350000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[12361]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-12T19:23:31.2730000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[12362]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[12363]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2760000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[12364]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[12365]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[12366]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[12367]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2660000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[12368]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2650000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 37
Minimum throttle percentage: 3 

Event[12369]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2640000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[12370]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2580000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12371]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2570000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12372]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2530000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12373]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2530000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12374]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12375]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12376]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2450000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12377]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2440000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12378]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12379]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2410000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12380]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2390000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12381]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12382]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12383]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2360000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12384]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2350000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[12385]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-12T19:23:31.2220000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[12386]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-12T19:23:30.7730000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[12387]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-12T19:23:30.7620000Z
  Event ID: 41
  Task: N/A
  Level: Critical 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 

Event[12388]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-12T19:23:30.7600000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[12389]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:30.7290000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12390]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:30.6320000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12391]
  Log Name: System
  Source: volmgr
  Date: 2024-01-12T19:23:30.5860000Z
  Event ID: 161
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Dump file creation failed due to error during dump creation. 

Event[12392]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-12T19:23:30.4950000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[12393]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:25.5610000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12394]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:25.5600000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12395]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-12T19:23:25.5590000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12396]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-12T19:23:24.1290000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[12397]
  Log Name: System
  Source: EventLog
  Date: 2024-01-12T19:23:38.7250000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[12398]
  Log Name: System
  Source: EventLog
  Date: 2024-01-12T19:23:38.7250000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[12399]
  Log Name: System
  Source: EventLog
  Date: 2024-01-12T19:23:38.7250000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[12400]
  Log Name: System
  Source: EventLog
  Date: 2024-01-12T19:23:38.7240000Z
  Event ID: 6008
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The previous system shutdown at 19:21:39 on ?12/?01/?2024 was unexpected. 

Event[12401]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T19:23:24.0810000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[12402]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T19:23:24.0750000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[12403]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T19:23:24.0750000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[12404]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T19:23:24.0750000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[12405]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T19:23:24.0750000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?12T19:23:22.000000000Z. 

Event[12406]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T19:23:24.0750000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was false. The last boot's success status was true. 

Event[12407]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T19:23:24.0750000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[12408]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T19:23:24.0750000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[12409]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T19:23:24.0750000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[12410]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T19:23:24.0750000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?12T19:23:23.500000000Z. 

Event[12411]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T18:09:32.8310000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12412]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T18:07:28.6660000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12413]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T17:39:36.4250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12414]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-12T16:12:02.8190000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12415]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-12T15:54:58.8200000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12416]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-12T15:37:54.8200000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12417]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-12T15:20:50.8210000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12418]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T15:04:19.0990000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\Windows.old\Windows\System32\Config\SYSTEM was reorganized with a starting size of 20660224 bytes and an ending size of 20418560 bytes. 

Event[12419]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-12T15:03:30.8340000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[12420]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-12T15:03:30.8180000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12421]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T14:23:20.8550000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[12422]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T13:01:25.3780000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience. 

Event[12423]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T13:01:25.1870000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience 

Event[12424]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T13:01:24.2340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_424.400.20.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[12425]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T13:01:20.9550000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9PCFS5B6T72H-Microsoft.Paint 

Event[12426]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T13:01:19.9250000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9PCFS5B6T72H-Microsoft.Paint 

Event[12427]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T13:01:18.4020000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Paint_11.2311.29.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[12428]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T13:00:47.7730000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12429]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T13:00:43.9090000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12430]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T13:00:34.3150000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12431]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T13:00:29.4220000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12432]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T13:00:29.4220000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12433]
  Log Name: System
  Source: EventLog
  Date: 2024-01-12T12:00:00.8410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 173620 seconds. 

Event[12434]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T11:19:16.5260000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsldb157374
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{16F922AC-4B86-48A9-812B-B290A531730D}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12435]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T11:19:16.4750000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2030.0) - Current Channel (Broad) 

Event[12436]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T11:19:11.5930000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2030.0) - Current Channel (Broad) 

Event[12437]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-12T11:18:52.3060000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12438]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T10:59:15.5640000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12439]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T10:37:59.2720000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001520000006). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12440]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T10:37:59.2270000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12441]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T10:35:55.3710000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001520000006). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12442]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T10:35:55.3640000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000004). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12443]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T10:35:55.2590000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000004). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12444]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T10:35:55.2490000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000005). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12445]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T10:35:23.4920000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000005). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12446]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T10:35:23.4830000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001320000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12447]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T10:35:18.7910000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001320000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12448]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T10:35:14.4760000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12449]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T10:03:50.8530000Z
  Event ID: 7034
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The EaseUS UPDATE SERVICE service terminated unexpectedly. It has done this 1 time(s). 

Event[12450]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:53:47.9470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12451]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:42:39.1850000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12452]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:38:23.5650000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12453]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T09:38:23.4970000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12454]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:36:56.0780000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12455]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:36:16.0210000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12456]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:36:16.0150000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001520000005). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12457]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:36:15.9170000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001520000005). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12458]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:36:15.9110000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001520000004). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12459]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:36:11.3010000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001520000004). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12460]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:36:11.2800000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001320000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12461]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:36:11.1730000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001320000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12462]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:36:11.1620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000003). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12463]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:36:00.2000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[12464]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:44.9350000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12465]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:44.9300000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000005). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12466]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:44.8290000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000005). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12467]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:44.8220000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12468]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:22.5750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12469]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:22.5690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12470]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:22.4650000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12471]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:22.4520000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12472]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:14.4400000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12473]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:14.4120000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000004). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12474]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-12T09:35:14.3060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000004). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12475]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T09:34:43.7830000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\Settings\settings.dat was cleared updating 28 keys and creating 5 modified pages. 

Event[12476]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:34:38.2290000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12477]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:34:16.8960000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12478]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:34:14.5090000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12479]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:34:14.4850000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12480]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:34:09.1350000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12481]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T09:34:08.6760000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Steam Client Service service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion. 

Event[12482]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T09:34:08.6760000Z
  Event ID: 7009
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect. 

Event[12483]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 48776. 

Event[12484]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 48776. 

Event[12485]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[12486]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[12487]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[12488]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[12489]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[12490]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[12491]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[12492]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[12493]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[12494]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{d9687eba-b0c3-11ee-8946-086ac578260b}" 

Event[12495]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[12496]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[12497]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[12498]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[12499]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[12500]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[12501]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[12502]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca0-31dd-9ba 

Event[12503]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 3; device name: \Volume{234e3a45-fca0-31dd-9bac-204183070f1e}. 

Event[12504]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[12505]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca0-31dd-9bac-204183070f1e}" created 

Event[12506]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[12507]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[12508]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[12509]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[12510]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[12511]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 3l 

Event[12512]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[12513]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[12514]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T09:34:04.9620000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[12515]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-12T09:34:00.5310000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12516]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:33:57.0010000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12517]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-12T09:33:32.5510000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[12518]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:33:31.9380000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12519]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T09:33:31.9360000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12520]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-12T09:33:31.8440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?12T00:30:35.722541500Z
Wake Time: ?2024?-?01?-?12T09:33:30.816569000Z

Wake Source: Unknown 

Event[12521]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-12T09:33:31.3420000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[12522]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-12T09:33:31.2010000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[12523]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-12T09:33:31.0310000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 12 to 14.

Reason Unknown 

BootId: 5 

Event[12524]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-12T09:33:30.7090000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 11 to 12.

Reason SxTransition 

BootId: 5 

Event[12525]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T09:33:30.7080000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[12526]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T09:33:30.7080000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[12527]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-12T09:33:30.7080000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[12528]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-12T09:33:30.0490000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[12529]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-12T09:33:29.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?12T09:33:29.500000000Z from ?2024?-?01?-?12T00:30:45.041148200Z.
Time Delta: 32564458 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?12T09:33:29.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12530]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-12T00:30:45.0410000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[12531]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-12T00:30:37.4400000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[12532]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-12T00:30:35.7250000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 10 to 11.

Reason InputAccelerometer 

BootId: 5 

Event[12533]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-12T00:30:35.7220000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[12534]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-12T00:30:35.3780000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[12535]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:31.0190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {2DE3095A-B49E-418F-B5C1-69D2CCF62A8F} did not register with DCOM within the required timeout. 

Event[12536]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:30.7890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12537]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:30.7760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12538]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:30.7670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12539]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:30.7540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12540]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.9160000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12541]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.9070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12542]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12543]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12544]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12545]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12546]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12547]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12548]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12549]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12550]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12551]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12552]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12553]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.8000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12554]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12555]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12556]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12557]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12558]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12559]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12560]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12561]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12562]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12563]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12564]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12565]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.7010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12566]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12567]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12568]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12569]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12570]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12571]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12572]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6510000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12573]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12574]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12575]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12576]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12577]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.6030000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12578]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12579]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12580]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12581]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12582]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12583]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12584]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12585]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12586]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12587]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12588]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.5020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12589]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.4940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12590]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.4840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12591]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.4760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12592]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.4650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12593]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.4570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12594]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.4450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12595]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.4310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12596]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.4200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12597]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.4100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12598]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12599]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12600]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12601]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12602]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12603]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12604]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12605]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12606]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12607]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12608]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.3070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12609]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12610]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12611]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12612]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12613]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12614]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12615]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12616]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12617]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12618]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12619]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12620]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.2050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12621]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12622]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12623]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12624]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12625]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12626]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12627]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12628]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1350000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12629]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12630]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12631]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12632]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.1000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12633]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.0910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12634]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.0820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12635]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.0730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12636]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.0640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12637]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.0540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12638]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:29.0450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12639]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:28.9400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12640]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:28.9290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12641]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:28.7300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12642]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:28.6690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12643]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:28.6600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12644]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:28.6120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12645]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:28.6020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12646]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:28.5080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12647]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:28.4930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12648]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[12649]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[12650]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[12651]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[12652]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[12653]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[12654]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[12655]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[12656]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[12657]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[12658]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" 

Event[12659]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[12660]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[12661]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[12662]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{e2511cd6-afad-11ee-8946-086ac578260b}" 

Event[12663]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[12664]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca3-31dd-9bac-2041830 

Event[12665]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[12666]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-12T00:30:26.5570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[12667]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:25.5500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[12668]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:25.5410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[12669]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:25.5330000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12670]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:25.3400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[12671]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:25.3300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[12672]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-12T00:30:25.3140000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12673]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T23:33:03.2220000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12674]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T23:30:58.7320000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12675]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T23:26:33.7760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?11T23:26:33.686537100Z from ?2024?-?01?-?11T23:26:33.685813000Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 24560).

RTC time: ?2024?-?01?-?11T23:26:33.686537100Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12676]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T23:26:33.6870000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[12677]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T23:26:33.6840000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[12678]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T23:26:33.6800000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[12679]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T22:54:27.1460000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsStore_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 17 keys and creating 3 modified pages. 

Event[12680]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T22:45:32.5710000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12681]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T22:43:21.6520000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12682]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T22:23:07.5120000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12683]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T22:21:03.2060000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12684]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T21:59:11.8860000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl04ca5ac8
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{08A48B01-B70E-4BC4-B8D7-13458CA9E989}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12685]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T21:59:11.8190000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2001.0) - Current Channel (Broad) 

Event[12686]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T21:59:07.1300000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.2001.0) - Current Channel (Broad) 

Event[12687]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T21:59:06.9550000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12688]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-11T21:39:56.8830000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 121932 seconds since the last report. 

Event[12689]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-11T21:39:56.8830000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 121932 seconds since the last report. 

Event[12690]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-11T21:39:56.8830000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 121932 seconds since the last report. 

Event[12691]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-11T21:39:56.8830000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 121932 seconds since the last report. 

Event[12692]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-11T21:39:56.8670000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 121932 seconds since the last report. 

Event[12693]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-11T21:39:56.8670000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 121932 seconds since the last report. 

Event[12694]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-11T21:39:56.8670000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 121932 seconds since the last report. 

Event[12695]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-11T21:39:56.8670000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 121932 seconds since the last report. 

Event[12696]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-11T21:39:07.6440000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 8 to 10.

Reason InputAccelerometer 

BootId: 5 

Event[12697]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T20:58:30.0850000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000003). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12698]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T20:58:30.0600000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12699]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T20:56:22.1930000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000003). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12700]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T20:56:22.1840000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001520000003). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12701]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T20:56:22.0850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001520000003). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12702]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T20:56:22.0790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12703]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T20:56:14.8130000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12704]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T20:56:14.8050000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001520000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12705]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T20:56:09.9790000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001520000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12706]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T20:56:05.8000000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12707]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-11T20:49:06.5040000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 7 to 8.

Reason SessionUnlock 

BootId: 5 

Event[12708]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T18:26:23.9160000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop. 

Event[12709]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T18:26:23.7510000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NKSQGP7F2NH-5319275A.WhatsAppDesktop 

Event[12710]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T18:26:23.0680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5319275A.WhatsAppDesktop_2.2401.3.0_x64__cv1g1gvanyjgm\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[12711]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T18:26:14.2480000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12712]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T15:34:52.7730000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12713]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T15:28:57.6830000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12714]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T15:11:53.6770000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12715]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T14:54:49.6680000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12716]
  Log Name: System
  Source: stornvme
  Date: 2024-01-11T14:43:19.9580000Z
  Event ID: 129
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Reset to device, \Device\RaidPort3, was issued. 

Event[12717]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T14:38:54.9380000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 12 keys and creating 2 modified pages. 

Event[12718]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T14:37:45.6650000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12719]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-11T14:23:56.5740000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12720]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-11T14:23:56.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (Version 10.0, ?2010?-?06?-?15T03:47:08.000000000Z) unloaded successfully. 

Event[12721]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T14:23:55.4190000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9MWPM2CQNLHN-Microsoft.GamingServices 

Event[12722]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T14:23:54.9200000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.GamingServices_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[12723]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T14:23:54.8700000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Gaming Services
Service File Name:  "C:\Program Files\WindowsApps\Microsoft.GamingServices_17.84.7001.0_x64__8wekyb3d8bbwe\GamingServices.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[12724]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T14:23:54.8690000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Gaming Services
Service File Name:  "C:\Program Files\WindowsApps\Microsoft.GamingServices_17.84.7001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  NT AUTHORITY\LocalService 

Event[12725]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T14:23:54.4690000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The start type of the Gaming Services service was changed from auto start to disabled. 

Event[12726]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T14:23:54.4680000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The start type of the Gaming Services service was changed from auto start to disabled. 

Event[12727]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T14:23:54.3470000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MWPM2CQNLHN-Microsoft.GamingServices 

Event[12728]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T14:23:53.8430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GamingServices_17.84.7001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[12729]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T14:23:39.2050000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12730]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T14:20:36.4770000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12731]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T14:20:36.4770000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12732]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T14:20:25.6770000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[12733]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T14:20:25.6570000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[12734]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-11T14:11:50.1190000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_046D&PID_C548&MI_00\8&1A679ED3&0&0000 with the following status: 0. 

Event[12735]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T12:49:22.7390000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl9f36356f
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{987CCD87-287C-4F33-897B-5F79A80DFE78}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12736]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T12:49:22.6960000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1985.0) - Current Channel (Broad) 

Event[12737]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T12:49:17.3510000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1985.0) - Current Channel (Broad) 

Event[12738]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T12:49:13.5500000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12739]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T12:46:30.4470000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000006). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12740]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T12:46:30.4050000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12741]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T12:44:26.5660000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000006). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12742]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T12:44:26.5390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000004). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12743]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T12:44:26.4330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000004). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12744]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T12:44:26.4270000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000920000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12745]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T12:44:15.1190000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000920000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12746]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T12:44:15.1100000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000003). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12747]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T12:44:10.3030000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000003). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12748]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T12:44:06.0690000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12749]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T12:26:20.7950000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12750]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T12:04:21.2310000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12751]
  Log Name: System
  Source: EventLog
  Date: 2024-01-11T12:00:00.6480000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 87220 seconds. 

Event[12752]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T11:52:05.2380000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12753]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:35:48.9780000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000005). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12754]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T11:35:48.9420000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12755]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:45.0570000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000005). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12756]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:45.0490000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12757]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:44.9560000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12758]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:44.9510000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12759]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:40.9840000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12760]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:40.9780000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000C20000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12761]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:40.8800000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12762]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:40.8740000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12763]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:25.6850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12764]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:25.6730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12765]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T11:33:20.8090000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12766]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T11:33:16.6680000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12767]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:29:47.6630000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWKN-MICROSOFT.WINDOWSSOUNDRECORDER 

Event[12768]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:29:47.1030000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFHWKN-MICROSOFT.WINDOWSSOUNDRECORDER 

Event[12769]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T11:29:46.5330000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_11.2310.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[12770]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:28:49.4790000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12771]
  Log Name: System
  Source: nvlddmkm
  Date: 2024-01-11T11:27:39.0170000Z
  Event ID: 0
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[12772]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T11:12:15.6910000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12773]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T11:10:10.8270000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12774]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:08:24.8150000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NPV76S164X5-Microsoft.DirectXRuntime 

Event[12775]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:08:24.5010000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NPV76S164X5-Microsoft.DirectXRuntime 

Event[12776]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:08:19.8200000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH4SVJT-Microsoft.VCLibs.110.00.UWPDesktop 

Event[12777]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:08:19.4120000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NBLGGH4SVJT-Microsoft.VCLibs.110.00.UWPDesktop 

Event[12778]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T11:08:11.7600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.XboxIdentityProvider_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[12779]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:07:50.0810000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH4RV3P-Microsoft.VCLibs.120.00.UWPDesktop 

Event[12780]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:07:49.5400000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NBLGGH4RV3P-Microsoft.VCLibs.120.00.UWPDesktop 

Event[12781]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:07:40.1160000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12782]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:07:38.1920000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12783]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T11:07:38.1920000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[12784]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-11T11:07:33.7390000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'gameflt' (10.0, ?2010?-?06?-?15T03:47:08.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[12785]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T11:07:33.7100000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  gameflt
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\gameflt.inf_amd64_63b883f25bff8750\gameflt.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12786]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T11:07:32.8910000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  XVDD Port Driver
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\xvdd.inf_amd64_3bc562dcf69edf0d\xvdd.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[12787]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T11:07:31.3300000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Gaming Services
Service File Name:  "C:\Program Files\WindowsApps\Microsoft.GamingServices_17.83.17004.0_x64__8wekyb3d8bbwe\GamingServices.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[12788]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T11:07:31.3290000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Gaming Services
Service File Name:  "C:\Program Files\WindowsApps\Microsoft.GamingServices_17.83.17004.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  NT AUTHORITY\LocalService 

Event[12789]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T11:07:31.3050000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GamingServices_17.83.17004.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[12790]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T11:07:26.6570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[12791]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:59:06.5690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000003). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12792]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T10:59:06.5080000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12793]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:57:02.6910000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000003). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12794]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:57:02.6620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12795]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:57:02.5550000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12796]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:57:02.5390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000005). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12797]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:58.6080000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000005). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12798]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:58.5960000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001520000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12799]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:58.4860000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001520000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12800]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:58.4740000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12801]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:42.3450000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12802]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:42.3330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12803]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:42.2290000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12804]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:42.2120000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12805]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:14.7990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12806]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:14.7810000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000004). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12807]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:56:10.0380000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000004). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[12808]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T10:56:05.7510000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12809]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-11T10:55:51.3010000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[12810]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:55:10.7110000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12811]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-11T10:55:08.0310000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe with process id 20824 stopped the removal or ejection for the device USB\VID_0B05&PID_19AF&MI_02\6&de2eaf5&0&0002.
Process command line: "C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe" -Embedding
List of affected devices:
 

Event[12812]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-11T10:55:08.0310000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe with process id 17564 stopped the removal or ejection for the device USB\VID_0B05&PID_19AF&MI_02\6&de2eaf5&0&0002.
Process command line: "C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe" "C:\Program Files (x86)\ASUS\ArmouryDevice\resources\app.asar\.webpack\main\sdk"
List of affected devices:
 

Event[12813]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-11T10:55:08.0310000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe with process id 10120 stopped the removal or ejection for the device USB\VID_0B05&PID_19AF&MI_02\6&de2eaf5&0&0002.
Process command line: "C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe" -Embedding
List of affected devices:
HID\VID_0B05&PID_19AF&MI_02\7&382c88b3&0&0000
 

Event[12814]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-11T10:55:02.1340000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_046D&PID_C548&MI_00\8&16A853E3&0&0000 with the following status: 0. 

Event[12815]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:54:35.9670000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12816]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T10:34:01.9280000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[12817]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:33:45.7590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[12818]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:32:19.4850000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12819]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:32:10.2690000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12820]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:32:10.2460000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12821]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 8300. 

Event[12822]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 8300. 

Event[12823]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[12824]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[12825]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[12826]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[12827]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[12828]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[12829]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[12830]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[12831]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[12832]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{e2511cd6-afad-11ee-8946-086ac578260b}" 

Event[12833]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[12834]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[12835]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[12836]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[12837]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[12838]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[12839]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[12840]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca3-31dd-9ba 

Event[12841]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 2; device name: \Volume{234e3a45-fca3-31dd-9bac-204183070f1e}. 

Event[12842]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[12843]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca3-31dd-9bac-204183070f1e}" created 

Event[12844]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[12845]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[12846]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[12847]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[12848]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[12849]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 2l 

Event[12850]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[12851]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[12852]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T10:32:08.1270000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[12853]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:32:05.1770000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12854]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:31:58.6360000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12855]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T10:31:41.6480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?11T10:31:41.566222700Z from ?2024?-?01?-?11T10:31:41.565975200Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 27952).

RTC time: ?2024?-?01?-?11T10:31:41.566222700Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12856]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T10:31:41.5660000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[12857]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T10:31:41.5650000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?11T10:31:41.483622700Z from ?2024?-?01?-?11T10:31:41.483427800Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 27952).

RTC time: ?2024?-?01?-?11T10:31:41.483622700Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12858]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T10:31:41.4830000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[12859]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T10:31:41.4830000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[12860]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T10:31:41.4830000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?11T10:31:41.400504100Z from ?2024?-?01?-?11T10:31:47.030392600Z.
Time Delta: -5629 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 27952).

RTC time: ?2024?-?01?-?11T10:31:41.400504100Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12861]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T10:31:41.4000000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[12862]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T10:31:47.0300000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[12863]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:31:36.6990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/55597273-c171-427d-849c-30f494981c9d/) to URL group (0xFE00001520000006). Status: 0x0. Process Id 0x1178 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[12864]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:31:36.6990000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001520000006. Status 0x0. Process Id 0x1178 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[12865]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:31:36.6160000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00001020000001. Status 0x0. Process Id 0x1178 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[12866]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-11T10:31:36.6160000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/d3435469-3ce3-40a6-8c55-ef5b04b61f0a/) from URL group (0xFE00001020000001). Process Id 0x1178 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[12867]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T10:31:35.0170000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[12868]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-11T10:31:33.6760000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[12869]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:31:29.8500000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12870]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T10:31:29.8470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[12871]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-11T10:31:29.7420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?11T00:38:39.433768700Z
Wake Time: ?2024?-?01?-?11T10:31:28.694948800Z

Wake Source: Unknown 

Event[12872]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-11T10:31:29.3020000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[12873]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-11T10:31:28.8020000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 5 to 7.

Reason Unknown 

BootId: 5 

Event[12874]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-11T10:31:28.6670000Z
  Event ID: 134
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9) 

Event[12875]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-11T10:31:28.6580000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason SxTransition 

BootId: 5 

Event[12876]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-11T10:31:28.6570000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[12877]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-11T10:31:28.6570000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[12878]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-11T10:31:28.6570000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[12879]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-11T10:31:28.4060000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[12880]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-11T10:31:28.0750000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[12881]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T10:31:27.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?11T10:31:27.500000000Z from ?2024?-?01?-?11T00:39:11.008444700Z.
Time Delta: 35536491 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?11T10:31:27.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12882]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-11T00:39:11.0080000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[12883]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-11T00:38:43.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?11T00:38:43.500000000Z from ?2024?-?01?-?11T00:38:41.501142800Z.
Time Delta: 1998 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?11T00:38:43.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[12884]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-11T00:38:39.7180000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[12885]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-11T00:38:39.4400000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 3 to 4.

Reason InputAccelerometer 

BootId: 5 

Event[12886]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-11T00:38:39.4330000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[12887]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-11T00:38:38.8860000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[12888]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:34.0120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12889]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:34.0040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12890]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12891]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12892]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12893]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12894]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12895]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12896]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12897]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12898]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12899]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12900]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.9010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12901]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12902]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12903]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12904]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12905]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12906]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12907]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12908]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12909]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12910]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12911]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.8040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12912]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12913]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12914]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12915]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12916]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12917]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12918]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12919]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12920]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12921]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12922]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.7020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12923]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12924]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12925]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12926]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12927]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12928]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12929]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12930]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12931]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12932]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12933]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.6000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12934]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.5880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12935]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.5790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12936]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.4670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12937]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.4570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12938]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.4470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12939]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.4340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12940]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.4210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12941]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.4080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12942]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.3890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12943]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.3780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12944]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.3680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12945]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.3570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12946]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.3470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12947]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.3370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12948]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.3280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12949]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.3190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12950]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.3050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12951]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12952]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12953]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12954]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12955]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12956]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12957]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12958]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12959]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12960]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.2090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12961]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12962]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12963]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12964]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12965]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12966]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12967]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12968]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12969]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12970]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12971]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.1010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12972]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.0910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12973]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.0810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12974]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.0720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12975]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.0620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12976]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.0520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12977]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.0420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12978]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.0330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12979]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.0190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12980]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:33.0100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[12981]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[12982]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[12983]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[12984]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[12985]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[12986]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[12987]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[12988]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[12989]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[12990]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[12991]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0860000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[12992]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[12993]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[12994]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[12995]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{e250fd6a-afad-11ee-8946-086ac578260b}" 

Event[12996]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[12997]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[12998]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[12999]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-11T00:38:32.0850000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[13000]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:31.5610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[13001]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:31.5550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[13002]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:31.5470000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13003]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:31.3530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[13004]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:31.3460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {38E441FB-3D16-422F-8750-B2DACEC5CEFC} did not register with DCOM within the required timeout. 

Event[13005]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-11T00:38:31.3320000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13006]
  Log Name: System
  Source: User32
  Date: 2024-01-11T00:38:30.9040000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: power off
 Comment:  

Event[13007]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-11T00:38:12.7920000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 3.

Reason InputAccelerometer 

BootId: 5 

Event[13008]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T00:18:10.0860000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslf3bf7856
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{87ED7379-CCB4-4C97-A6BF-B0194219CF7B}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[13009]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T00:18:10.0500000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1962.0) - Current Channel (Broad) 

Event[13010]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T00:18:05.6350000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1962.0) - Current Channel (Broad) 

Event[13011]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T00:18:03.6430000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13012]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-11T00:17:54.4300000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1928.0) - Current Channel (Broad) 

Event[13013]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T00:07:37.9980000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13014]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-11T00:05:26.9030000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13015]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T23:33:03.3650000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13016]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T23:30:59.0140000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13017]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T23:19:34.6140000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000004). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13018]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T23:19:34.5810000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13019]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T23:16:55.4070000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000004). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13020]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T23:16:55.3890000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13021]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T23:16:50.5890000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13022]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T23:16:46.3800000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13023]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T22:23:03.0790000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13024]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T22:20:58.7460000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13025]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T22:18:56.4370000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13026]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T22:18:56.3940000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13027]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T22:16:29.2190000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13028]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T22:16:29.2030000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000F20000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13029]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T22:16:24.4240000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000F20000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13030]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T22:16:20.1890000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13031]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-10T22:13:52.5570000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason SessionUnlock 

BootId: 5 

Event[13032]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-10T21:26:25.7270000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13033]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-10T21:09:21.7240000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13034]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-10T20:52:17.7180000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13035]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T20:40:16.0450000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\DRIVERS (TM: {e2511909-afad-11ee-8946-086ac578260b}, RM: {e2511908-afad-11ee-8946-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[13036]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T20:40:16.0030000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\WINDOWS\System32\config\SYSTEM (TM: {e2511906-afad-11ee-8946-086ac578260b}, RM: {e2511905-afad-11ee-8946-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[13037]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T20:40:13.1210000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\WINDOWS\System32\config\DRIVERS (TM: {e25118e0-afad-11ee-8946-086ac578260b}, RM: {e25118df-afad-11ee-8946-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[13038]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T20:40:13.0920000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\WINDOWS\System32\config\SYSTEM (TM: {e25118dd-afad-11ee-8946-086ac578260b}, RM: {e25118dc-afad-11ee-8946-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[13039]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-10T20:35:13.7130000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13040]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T20:21:28.8240000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13041]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T20:19:24.7410000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13042]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T20:19:10.8110000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9MSMLRH6LZF3-Microsoft.WindowsNotepad. 

Event[13043]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-10T20:19:10.5290000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy3) is healthy.  No action is needed. 

Event[13044]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T20:19:10.4530000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MSMLRH6LZF3-Microsoft.WindowsNotepad 

Event[13045]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T20:19:02.3860000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsNotepad_11.2311.35.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[13046]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T20:18:59.0040000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.4_4000.1082.2259.0_x86__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[13047]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T20:18:49.2870000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.1.4_4000.1082.2259.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[13048]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T20:18:16.4050000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13049]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T20:18:16.4050000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13050]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-10T20:17:53.7180000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[13051]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-10T20:17:53.7050000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13052]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T20:17:53.1760000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[13053]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T18:42:57.1930000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13054]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T18:40:52.4690000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13055]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T17:19:00.2820000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000005). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13056]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T17:19:00.2690000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13057]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T17:16:29.1850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000005). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13058]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T17:16:29.1790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000003). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13059]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T17:16:24.2890000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000003). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13060]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T17:16:20.1760000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13061]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T15:22:58.3660000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\9d174002b722e1ca_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[13062]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T14:59:53.8740000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13063]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T13:19:32.1220000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13064]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T13:19:32.1000000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13065]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T13:17:28.2120000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13066]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T13:17:28.2060000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13067]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T13:17:28.1130000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13068]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T13:17:28.1090000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13069]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T13:16:56.6750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13070]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T13:16:56.6620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000004). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13071]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T13:16:51.8030000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000004). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13072]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T13:16:47.6580000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13073]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T13:09:51.8330000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[13074]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:47:27.8350000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13075]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:35:49.3860000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13076]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:27:35.1460000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13077]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:19:00.9830000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13078]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T12:19:00.9430000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13079]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:17:02.8750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[13080]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:57.0940000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13081]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:57.0750000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13082]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:56.9670000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13083]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:56.9540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13084]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:46.2150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13085]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:46.2090000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000003). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13086]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:46.1090000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000003). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13087]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:46.1000000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000003). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13088]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:44.8270000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13089]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:44.8080000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13090]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:44.6960000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13091]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:44.6820000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13092]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:40.6570000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13093]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:40.6520000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13094]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:40.5500000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13095]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:40.5410000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000002). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13096]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:32.4370000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13097]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:32.4310000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13098]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:32.3330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13099]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:32.3250000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13100]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:20.3490000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13101]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:20.3410000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13102]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T12:16:20.2390000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x7E0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13103]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:15:48.5180000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13104]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:15:40.0620000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13105]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:15:40.0400000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13106]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 23092. 

Event[13107]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 23092. 

Event[13108]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[13109]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[13110]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[13111]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[13112]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[13113]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6170000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[13114]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[13115]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[13116]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[13117]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6150000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{e250fd6a-afad-11ee-8946-086ac578260b}" 

Event[13118]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[13119]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[13120]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[13121]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[13122]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[13123]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[13124]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[13125]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[13126]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[13127]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[13128]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[13129]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[13130]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[13131]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[13132]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[13133]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[13134]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[13135]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[13136]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[13137]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-10T12:15:36.6140000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[13138]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:15:35.0890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13139]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:15:28.1720000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13140]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:15:13.2330000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13141]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T12:15:13.2310000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13142]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-10T12:15:12.9910000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[13143]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T12:08:41.1320000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Windows Malicious Software Removal Tool x64 - v5.120 (KB890830) 

Event[13144]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T12:07:50.9240000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13145]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T12:05:47.9290000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Windows Malicious Software Removal Tool x64 - v5.120 (KB890830) 

Event[13146]
  Log Name: System
  Source: EventLog
  Date: 2024-01-10T12:00:00.4860000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 814 seconds. 

Event[13147]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T11:57:21.8110000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1928.0) - Current Channel (Broad) 

Event[13148]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T11:57:21.7960000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsla7bab7a2
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{42CE7D0F-9A96-4D40-9B6D-14DA985D60EF}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[13149]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T11:57:17.9650000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1928.0) - Current Channel (Broad) 

Event[13150]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T11:57:00.6430000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13151]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T11:56:31.8270000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13152]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:49:51.3760000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/d3435469-3ce3-40a6-8c55-ef5b04b61f0a/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x1178 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[13153]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:49:51.3750000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001020000001. Status 0x0. Process Id 0x1178 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[13154]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T11:49:15.7050000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslfd5afded
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8ECC88F8-53CB-4538-B413-8E073F4A3E63}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[13155]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-10T11:48:44.5430000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13156]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:47:44.0260000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[13157]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:47:44.0260000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[13158]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:47:44.0260000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[13159]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:47:44.0260000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[13160]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:47:44.0100000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[13161]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:47:44.0100000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[13162]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:47:44.0100000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[13163]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:47:44.0100000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[13164]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T11:46:52.4200000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[13165]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T11:46:49.1800000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 2024-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 for x64 (KB5033920) 

Event[13166]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-10T11:46:49.1800000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 2024-01 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5034123) 

Event[13167]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-10T11:46:47.9250000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[13168]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-10T11:46:47.7230000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[13169]
  Log Name: System
  Source: TPM
  Date: 2024-01-10T11:46:46.6940000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[13170]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-10T11:46:43.4670000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[13171]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-10T11:46:43.3430000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[13172]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.3210000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00001320000001). Status: 0x0. Process Id 0x1534 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[13173]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.3210000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001320000001. Status 0x0. Process Id 0x1534 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[13174]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-10T11:46:43.2940000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[13175]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13176]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13177]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13178]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13179]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13180]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13181]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13182]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13183]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13184]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13185]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13186]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13187]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13188]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13189]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13190]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13191]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-10T11:46:43.2290000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13192]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-10T11:46:42.4570000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[13193]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-10T11:46:42.4510000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[13194]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-10T11:46:42.4510000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[13195]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-10T11:46:42.4510000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[13196]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:42.4420000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13197]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:42.4400000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13198]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:42.4350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13199]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:42.4350000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[13200]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:42.4350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13201]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:42.4310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13202]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:42.4220000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13203]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:42.4180000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13204]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-10T11:46:41.7350000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[13205]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-10T11:46:41.7350000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[13206]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-10T11:46:41.7290000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[13207]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.7220000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[13208]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.7210000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[13209]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.7090000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[13210]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.7060000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[13211]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.6910000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[13212]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.6890000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[13213]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.6880000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[13214]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.6820000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[13215]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.6720000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[13216]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.6680000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[13217]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-10T11:46:41.6510000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[13218]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-10T11:46:41.6280000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[13219]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-10T11:46:41.6280000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[13220]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-10T11:46:40.1830000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[13221]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T11:46:39.6590000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[13222]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-10T11:46:39.2090000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[13223]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-10T11:46:38.9180000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[13224]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-10T11:46:37.6750000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[13225]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-10T11:46:35.7180000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[13226]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-10T11:46:35.3240000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[13227]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-10T11:46:34.9820000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[13228]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-10T11:46:33.8420000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[13229]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-10T11:46:33.2100000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[13230]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-10T11:46:33.0050000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13231]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-10T11:46:33.0050000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13232]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-10T11:46:32.9580000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13233]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-10T11:46:32.9580000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13234]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-10T11:46:32.9430000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13235]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-10T11:46:32.9270000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[13236]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-10T11:46:32.9270000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[13237]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-10T11:46:32.8640000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[13238]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13239]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8710000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13240]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13241]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8690000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13242]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8620000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13243]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13244]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13245]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8590000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13246]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8530000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13247]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13248]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8480000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13249]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13250]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8440000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13251]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13252]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8390000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13253]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13254]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8350000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13255]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13256]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8310000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13257]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8300000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13258]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8290000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13259]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13260]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13261]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-10T11:46:32.8130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[13262]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-10T11:46:32.4850000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[13263]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-10T11:46:32.4740000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[13264]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:32.4460000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13265]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:32.3420000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13266]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-10T11:46:32.2830000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[13267]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:27.5660000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13268]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:27.5650000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13269]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-10T11:46:27.5640000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13270]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-10T11:46:26.1210000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[13271]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T11:46:26.0780000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[13272]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-10T11:46:26.0730000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[13273]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-10T11:46:26.0730000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[13274]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-10T11:46:26.0730000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[13275]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-10T11:46:26.0730000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?10T11:46:24.000000000Z. 

Event[13276]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-10T11:46:26.0730000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[13277]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-10T11:46:26.0730000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[13278]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-10T11:46:26.0730000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[13279]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-10T11:46:26.0730000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[13280]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-10T11:46:26.0720000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?10T11:46:25.500000000Z. 

Event[13281]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T23:38:01.2720000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?09T23:38:01.272360100Z. 

Event[13282]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T23:38:01.1900000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[13283]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T23:38:00.4940000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Shutdown 
Event Code: 0x0 
Reason: Kernel API 

Event[13284]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-09T23:37:56.6140000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[13285]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-09T23:37:56.6070000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[13286]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:37:56.4750000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[13287]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:37:56.4750000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[13288]
  Log Name: System
  Source: EventLog
  Date: 2024-01-10T11:46:42.4980000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 16 seconds. 

Event[13289]
  Log Name: System
  Source: EventLog
  Date: 2024-01-10T11:46:42.4980000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[13290]
  Log Name: System
  Source: EventLog
  Date: 2024-01-10T11:46:42.4970000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[13291]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:37:55.4940000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[13292]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:37:55.4940000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[13293]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-09T23:37:55.4940000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[13294]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-09T23:37:55.4940000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[13295]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:37:55.4930000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[13296]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:37:55.4930000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[13297]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:37:55.4740000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[13298]
  Log Name: System
  Source: EventLog
  Date: 2024-01-09T23:37:55.4950000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[13299]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:37:54.4320000Z
  Event ID: 10005
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
DCOM got error "1115" attempting to start the service TrustedInstaller with arguments "Unavailable" in order to run the server:
{752073A1-23F2-4396-85F0-8FDB879ED0ED} 

Event[13300]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:37:54.3320000Z
  Event ID: 10005
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
DCOM got error "1115" attempting to start the service TrustedInstaller with arguments "Unavailable" in order to run the server:
{752073A1-23F2-4396-85F0-8FDB879ED0ED} 

Event[13301]
  Log Name: System
  Source: nvlddmkm
  Date: 2024-01-09T23:37:52.2860000Z
  Event ID: 0
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13302]
  Log Name: System
  Source: User32
  Date: 2024-01-09T23:37:52.1230000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The process C:\WINDOWS\system32\winlogon.exe (PC-MAIN) has initiated the shutdown of computer PC-MAIN on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
 Reason Code: 0x500ff
 Shut-down Type: shutdown
 Comment:  

Event[13303]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:37:52.1170000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from auto start to demand start. 

Event[13304]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-09T23:37:52.1290000Z
  Event ID: 4
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service stopped. 

Event[13305]
  Log Name: System
  Source: Microsoft-Windows-WinREAgent
  Date: 2024-01-09T23:37:41.8030000Z
  Event ID: 4501
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Servicing succeeded. The Windows Recovery Environment version is now: 10.0.22621.3000 

Event[13306]
  Log Name: System
  Source: Volsnap
  Date: 2024-01-09T23:37:39.0220000Z
  Event ID: 36
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The shadow copies of volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} were aborted because the shadow copy storage could not grow due to a user imposed limit. 

Event[13307]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:37:37.3710000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[13308]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-09T23:37:36.7590000Z
  Event ID: 3
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service started. 

Event[13309]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T23:37:33.8320000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.22621.3007_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[13310]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-09T23:37:29.4510000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[13311]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-09T23:37:29.3070000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[13312]
  Log Name: System
  Source: TPM
  Date: 2024-01-09T23:37:28.7260000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[13313]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:37:27.5020000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[13314]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.3750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x14E4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[13315]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.3750000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000420000001. Status 0x0. Process Id 0x14E4 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[13316]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-09T23:37:27.3530000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[13317]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-09T23:37:27.2990000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[13318]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13319]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13320]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13321]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13322]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13323]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13324]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13325]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13326]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13327]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13328]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13329]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13330]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13331]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13332]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13333]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13334]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:37:27.2560000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[13335]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-09T23:37:26.4910000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[13336]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:37:26.4850000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[13337]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:37:26.4850000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[13338]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:37:26.4850000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[13339]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:26.4380000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13340]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:26.4350000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13341]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:26.4310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13342]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:26.4310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?1990?-?04?-?22T08:36:26.000000000Z) unloaded successfully. 

Event[13343]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:26.4310000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?1990?-?04?-?22T08:36:26.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13344]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:26.4260000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13345]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:26.4190000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13346]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:26.4150000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13347]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-09T23:37:25.8600000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[13348]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-09T23:37:25.8600000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[13349]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-09T23:37:25.8560000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[13350]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.8480000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[13351]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.8470000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[13352]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.8350000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[13353]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.8320000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[13354]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.8180000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[13355]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.8160000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[13356]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.8140000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[13357]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.8080000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[13358]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.7980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[13359]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.7940000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[13360]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-09T23:37:25.7780000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[13361]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-09T23:37:25.7550000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[13362]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-09T23:37:25.7550000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[13363]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-09T23:37:24.3370000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[13364]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T23:37:23.8150000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[13365]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-09T23:37:23.2410000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[13366]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-09T23:37:22.1230000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[13367]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-09T23:37:17.8620000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[13368]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-09T23:37:17.1660000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[13369]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-09T23:37:16.0290000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[13370]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-09T23:37:15.4270000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[13371]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-09T23:37:15.2370000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13372]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-09T23:37:15.2360000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13373]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-09T23:37:15.1900000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13374]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-09T23:37:15.1740000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13375]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-09T23:37:15.1740000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[13376]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-09T23:37:15.1580000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[13377]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-09T23:37:15.1580000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[13378]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-09T23:37:15.1110000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[13379]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.1160000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13380]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.1150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13381]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.1140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13382]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.1130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13383]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.1070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13384]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.1060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13385]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.1050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13386]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.1040000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[13387]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13388]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0970000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13389]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13390]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0920000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13391]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13392]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13393]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13394]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13395]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13396]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0790000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13397]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0770000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13398]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0760000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13399]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0750000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13400]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0740000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13401]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0730000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[13402]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-09T23:37:15.0600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[13403]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-09T23:37:14.7550000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[13404]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-09T23:37:14.6470000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[13405]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T23:37:14.6240000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[13406]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T23:37:14.6120000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[13407]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:14.5820000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13408]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:14.4830000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13409]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-09T23:37:14.4220000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[13410]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:09.6220000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13411]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:09.6210000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13412]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T23:37:09.6200000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13413]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-09T23:37:08.1560000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[13414]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T23:37:08.1100000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[13415]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T23:37:08.1050000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[13416]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T23:37:08.1050000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[13417]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T23:37:08.1050000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[13418]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T23:37:08.1050000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?09T23:37:06.000000000Z. 

Event[13419]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T23:37:08.1050000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[13420]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T23:37:08.1050000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[13421]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T23:37:08.1050000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[13422]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T23:37:08.1050000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[13423]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T23:37:08.1050000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?09T23:37:07.500000000Z. 

Event[13424]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T23:36:33.5030000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?09T23:36:33.503266700Z. 

Event[13425]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T23:36:33.3910000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[13426]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T23:36:32.5180000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Reboot 
Event Code: 0x0 
Reason: Kernel API 

Event[13427]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-09T23:36:28.6820000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[13428]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-09T23:36:28.6780000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[13429]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:36:28.5050000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[13430]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:36:28.5050000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[13431]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:36:27.9940000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00000C20000001. Status 0x0. Process Id 0x13A4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[13432]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T23:36:27.9930000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/faac28f5-98e7-406a-a9c0-bff8412c6270/) from URL group (0xFE00000C20000001). Process Id 0x13A4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[13433]
  Log Name: System
  Source: EventLog
  Date: 2024-01-09T23:37:26.4920000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 18 seconds. 

Event[13434]
  Log Name: System
  Source: EventLog
  Date: 2024-01-09T23:37:26.4910000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[13435]
  Log Name: System
  Source: EventLog
  Date: 2024-01-09T23:37:26.4900000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[13436]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:36:27.5420000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[13437]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:36:27.5420000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[13438]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-09T23:36:27.5410000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[13439]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-09T23:36:27.5410000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[13440]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:36:27.5400000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[13441]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-09T23:36:27.5400000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[13442]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:36:27.5050000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[13443]
  Log Name: System
  Source: EventLog
  Date: 2024-01-09T23:36:27.5410000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[13444]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-09T23:35:59.8370000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[13445]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.4330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13446]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.4260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13447]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.4180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13448]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.4080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13449]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.4000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13450]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13451]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13452]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13453]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13454]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13455]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13456]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13457]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13458]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13459]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13460]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13461]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.3040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13462]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13463]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13464]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13465]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13466]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13467]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2530000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13468]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2440000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13469]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13470]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13471]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13472]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13473]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.2050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13474]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13475]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13476]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13477]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13478]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13479]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13480]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13481]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13482]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13483]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13484]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13485]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.1010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13486]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13487]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13488]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13489]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13490]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13491]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13492]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13493]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13494]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13495]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13496]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13497]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:55.0020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13498]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13499]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13500]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13501]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13502]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13503]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13504]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13505]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13506]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13507]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13508]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.9040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13509]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13510]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13511]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13512]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13513]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13514]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13515]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13516]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13517]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13518]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13519]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13520]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13521]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.8050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13522]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13523]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13524]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13525]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13526]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13527]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13528]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13529]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13530]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13531]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13532]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13533]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13534]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.7000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13535]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.6270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13536]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.6110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13537]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T23:35:54.5900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13538]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[13539]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[13540]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[13541]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[13542]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[13543]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[13544]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[13545]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[13546]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[13547]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[13548]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" 

Event[13549]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[13550]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[13551]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[13552]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{b564fa1e-ae66-11ee-8944-086ac578260b}" 

Event[13553]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[13554]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca0-31dd-9bac-2041830 

Event[13555]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[13556]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T23:35:53.3190000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[13557]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:33:03.1740000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13558]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T23:30:58.6930000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13559]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T22:46:17.2820000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[13560]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T22:40:00.8890000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13561]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T22:37:49.8180000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13562]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T22:23:37.0280000Z
  Event ID: 7034
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The EaseUS UPDATE SERVICE service terminated unexpectedly. It has done this 1 time(s). 

Event[13563]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T22:23:36.3190000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve.tmp was cleared updating 0 keys and creating 0 modified pages. 

Event[13564]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T22:22:58.5530000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13565]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T22:20:54.2480000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13566]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T21:42:57.0270000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13567]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T21:40:52.0920000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13568]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-09T21:00:28.6990000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13569]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:44:42.1220000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000004). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13570]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T20:44:42.0940000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13571]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-09T20:43:24.6950000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13572]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:42:38.2720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000004). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13573]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:42:38.2450000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13574]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:42:38.1270000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13575]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:42:38.1120000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000003). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13576]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:42:22.9460000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000003). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13577]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:42:22.9260000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13578]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:42:18.0420000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13579]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T20:42:13.9200000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13580]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:35:52.5060000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13581]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T20:35:52.4800000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13582]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:40.6470000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13583]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:40.6120000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13584]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:40.5000000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13585]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:40.4850000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13586]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:36.5170000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13587]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:36.5090000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13588]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:36.4080000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13589]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:36.3960000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000007). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13590]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:04.9340000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000007). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13591]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:04.9260000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001720000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13592]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T20:33:00.0450000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001720000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13593]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T20:32:55.9210000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13594]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T20:31:59.8810000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13595]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T20:31:16.7670000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13596]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T20:30:01.2570000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 18 to 20.

Reason InputHid 

BootId: 3 

Event[13597]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T20:29:21.0460000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 17 to 18.

Reason SessionUnlock 

BootId: 3 

Event[13598]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T20:28:21.0420000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 15 to 17.

Reason Unknown 

BootId: 3 

Event[13599]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-09T20:26:20.6950000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13600]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-09T20:09:16.6920000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13601]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-09T20:02:29.8160000Z
  Event ID: 4
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service stopped. 

Event[13602]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-09T19:59:09.8780000Z
  Event ID: 3
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service started. 

Event[13603]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-09T19:57:49.4530000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WIMMount' (10.0, ?2099?-?11?-?10T08:34:46.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[13604]
  Log Name: System
  Source: Microsoft-Windows-WinREAgent
  Date: 2024-01-09T19:57:49.2010000Z
  Event ID: 4500
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Starting Windows Recovery Environment servicing. 

Event[13605]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:57:44.7630000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 2024-01 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5034123) 

Event[13606]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:56:28.1500000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE 

Event[13607]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:56:26.8600000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE 

Event[13608]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T19:56:25.5560000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22311.1401.3.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[13609]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:55:48.0530000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13610]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:55:43.7600000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13611]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T19:55:41.7340000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from demand start to auto start. 

Event[13612]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:55:40.8940000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 2024-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 for x64 (KB5033920) 

Event[13613]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:55:32.1560000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13614]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:55:23.9240000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13615]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:55:18.9190000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13616]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:55:18.9060000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13617]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:55:18.9060000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13618]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-09T19:51:56.6830000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[13619]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-09T19:51:56.6670000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13620]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T19:48:17.9560000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13621]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T19:46:13.1180000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13622]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T19:45:17.3000000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[13623]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:45:11.1780000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000C20000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13624]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T19:45:11.1260000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13625]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:43:07.2590000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000C20000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13626]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:43:07.2340000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000006). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13627]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:43:07.1340000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000006). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13628]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:43:07.1280000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000020000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13629]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:54.0870000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000020000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13630]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:54.0780000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000005). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13631]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:53.9550000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000005). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13632]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:53.9380000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000004). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13633]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:45.8810000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000004). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13634]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:45.8750000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000003). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13635]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:45.7730000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000003). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13636]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:45.7570000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13637]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T19:42:42.3770000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[13638]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T19:42:24.0770000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 14 to 15.

Reason SessionUnlock 

BootId: 3 

Event[13639]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:13.7720000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13640]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:13.7480000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000820000005). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13641]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-09T19:42:13.6460000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000820000005). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13642]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T19:42:12.4060000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 27 keys and creating 3 modified pages. 

Event[13643]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T19:41:16.5410000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13644]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T19:41:10.0130000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl21b98e70
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8ECC88F8-53CB-4538-B413-8E073F4A3E63}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[13645]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:41:09.9970000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1898.0) - Current Channel (Broad) 

Event[13646]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T19:41:04.6380000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13647]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T19:41:04.6120000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13648]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 37396. 

Event[13649]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 37396. 

Event[13650]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[13651]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[13652]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[13653]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7480000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[13654]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[13655]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7470000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[13656]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[13657]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[13658]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[13659]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{b564fa1e-ae66-11ee-8944-086ac578260b}" 

Event[13660]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[13661]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[13662]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[13663]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[13664]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e} 

Event[13665]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[13666]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[13667]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca0-31dd-9ba 

Event[13668]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 3; device name: \Volume{234e3a45-fca0-31dd-9bac-204183070f1e}. 

Event[13669]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[13670]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca0-31dd-9bac-204183070f1e}" created 

Event[13671]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[13672]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[13673]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[13674]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca0-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[13675]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[13676]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 3l 

Event[13677]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[13678]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[13679]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T19:41:03.7440000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[13680]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:41:01.9550000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1898.0) - Current Channel (Broad) 

Event[13681]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T19:40:58.7020000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13682]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-09T19:40:53.7560000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13683]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T19:40:45.8350000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13684]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T19:40:19.7520000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.LockApp_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[13685]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-09T19:40:19.4090000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13686]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-09T19:40:15.5410000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[13687]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T19:40:14.9780000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13688]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-09T19:40:14.9710000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13689]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-09T19:40:14.8760000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?09T00:03:36.939363000Z
Wake Time: ?2024?-?01?-?09T19:40:13.828540600Z

Wake Source: Unknown 

Event[13690]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-09T19:40:14.5090000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[13691]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T19:40:14.1400000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 12 to 14.

Reason Unknown 

BootId: 3 

Event[13692]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-09T19:40:13.7630000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[13693]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T19:40:13.7330000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 11 to 12.

Reason SxTransition 

BootId: 3 

Event[13694]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T19:40:13.7330000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[13695]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T19:40:13.7330000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[13696]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-09T19:40:13.7320000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[13697]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-09T19:40:13.0610000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[13698]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-09T19:40:12.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?09T19:40:12.500000000Z from ?2024?-?01?-?09T00:03:43.981057600Z.
Time Delta: 70588518 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?09T19:40:12.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[13699]
  Log Name: System
  Source: EventLog
  Date: 2024-01-09T19:40:12.8420000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 168149 seconds. 

Event[13700]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T00:03:43.9810000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[13701]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T00:03:38.4180000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[13702]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T00:03:36.9410000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 10 to 11.

Reason InputHid 

BootId: 3 

Event[13703]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-09T00:03:36.9390000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[13704]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-09T00:03:36.5250000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[13705]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[13706]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[13707]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[13708]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[13709]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[13710]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[13711]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[13712]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[13713]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[13714]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[13715]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" 

Event[13716]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[13717]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[13718]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[13719]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{67b28919-ad9f-11ee-8944-086ac578260b}" 

Event[13720]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[13721]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca3-31dd-9bac-2041830 

Event[13722]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[13723]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0500000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[13724]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-09T00:03:34.0350000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Closed file with user mode dispatch blocked: "\drive_fs_notification" 

Event[13725]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T23:53:45.6360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?08T23:53:45.552291900Z from ?2024?-?01?-?08T23:53:45.551511300Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 44984).

RTC time: ?2024?-?01?-?08T23:53:45.552291900Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[13726]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T23:53:45.5520000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[13727]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T23:53:45.5510000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?08T23:53:45.467378100Z from ?2024?-?01?-?08T23:53:45.466573100Z.
Time Delta: 0 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 44984).

RTC time: ?2024?-?01?-?08T23:53:45.467378100Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[13728]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T23:53:45.4670000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[13729]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-08T23:53:45.4670000Z
  Event ID: 35
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time service is now synchronizing the system time with the time source time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123) with reference id 494637363. Current local stratum number is 4. 

Event[13730]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T23:53:45.4660000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?08T23:53:45.381777400Z from ?2024?-?01?-?08T23:53:46.861972400Z.
Time Delta: -1480 ms

Change Reason: An application or system component changed the time.
Process: '\Device\HarddiskVolume9\Windows\System32\svchost.exe' (PID 44984).

RTC time: ?2024?-?01?-?08T23:53:45.381777400Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[13731]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T23:53:45.3820000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[13732]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-08T23:53:30.8630000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[13733]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T23:32:58.6870000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13734]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T23:29:16.3290000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13735]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T22:57:03.2160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1040 keys and creating 58 modified pages. 

Event[13736]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T22:22:54.0810000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13737]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T22:20:49.8330000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13738]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T21:11:17.2660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13739]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T21:11:17.2580000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13740]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T21:09:01.3750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13741]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T21:09:01.3690000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000003). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13742]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T21:09:01.2750000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000003). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13743]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T21:09:01.2700000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13744]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T21:08:46.0530000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13745]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T21:08:46.0420000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000004). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13746]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T21:08:41.1730000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000004). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13747]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T21:08:37.0370000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13748]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T18:09:33.1750000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13749]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T18:07:29.0220000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13750]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-08T17:15:24.2670000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:44692) reset policy scheme from {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[13751]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-08T17:15:20.9930000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:44692) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} 

Event[13752]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-08T17:15:09.9240000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:19756) reset policy scheme from {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[13753]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-08T17:02:27.5400000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:19756) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} 

Event[13754]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-08T16:45:40.9410000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[13755]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-08T16:42:11.3840000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 2023-10 Update for Windows 11 Version 22H2 for x64-based Systems (KB4023057) 

Event[13756]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T16:42:11.2500000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Microsoft Update Health Service
Service File Name:  "C:\Program Files\Microsoft Update Health Tools\uhssvc.exe"
Service Type:  user mode service
Service Start Type:  disabled
Service Account:  LocalSystem 

Event[13757]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-08T16:42:10.6670000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 2023-10 Update for Windows 11 Version 22H2 for x64-based Systems (KB4023057) 

Event[13758]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T16:01:47.8540000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13759]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T16:01:47.8380000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13760]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T15:59:20.7200000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13761]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T15:59:20.7060000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13762]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T15:59:15.8510000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13763]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T15:59:11.6980000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13764]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-08T15:57:15.9080000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13765]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-08T15:55:54.8500000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13766]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-08T15:41:53.6730000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:30236) reset policy scheme from {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[13767]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-08T15:38:50.8490000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13768]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-08T15:21:46.8490000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13769]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-08T15:04:42.8500000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13770]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-08T15:03:49.0630000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:30236) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} 

Event[13771]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T15:03:44.2000000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13772]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-08T15:03:40.8320000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:37940) reset policy scheme from {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} to {381b4222-f694-41f0-9685-ff5bb260df2e} 

Event[13773]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-08T15:02:58.7840000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 8 to 10.

Reason InputHid 

BootId: 3 

Event[13774]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T15:01:40.0540000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13775]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-08T14:55:51.6810000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 7 to 8.

Reason SessionUnlock 

BootId: 3 

Event[13776]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-08T14:47:22.8620000Z
  Event ID: 37
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->51.145.123.29:123). 

Event[13777]
  Log Name: System
  Source: Microsoft-Windows-Time-Service
  Date: 2024-01-08T14:47:22.8420000Z
  Event ID: 158
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The time provider 'VMICTimeProvider' has indicated that the current hardware and operating environment is not supported and has stopped. This behavior is expected for VMICTimeProvider on non-HyperV-guest environments. This may be the expected behavior for the current provider in the current operating environment as well. 

Event[13778]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-08T14:36:41.2250000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Process C:\Program Files\FL\FL.exe (process ID:37940) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c} 

Event[13779]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T12:59:53.6270000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000820000004). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13780]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T12:59:53.6120000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13781]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T12:57:42.4640000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000820000004). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13782]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T12:57:42.4600000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001220000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13783]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T12:57:37.6520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001220000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13784]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T12:57:33.4530000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13785]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T12:18:51.5770000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000003). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13786]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T12:18:51.5560000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13787]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T12:16:24.3840000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000003). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13788]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T12:16:24.3780000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13789]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T12:16:19.5520000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13790]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T12:16:15.3750000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13791]
  Log Name: System
  Source: EventLog
  Date: 2024-01-08T12:00:00.8410000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 54136 seconds. 

Event[13792]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-08T11:49:31.6200000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9MSSZTT1N39L-PythonSoftwareFoundation.Python.3.8 

Event[13793]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-08T11:49:31.1030000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MSSZTT1N39L-PythonSoftwareFoundation.Python.3.8 

Event[13794]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-08T11:48:52.7810000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13795]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:47:46.4450000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13796]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T11:47:46.4410000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13797]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T11:34:12.7200000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl956a527e
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{87A9AC58-D015-4426-9791-2EF15D0F4053}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[13798]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-08T11:34:12.6940000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1830.0) - Current Channel (Broad) 

Event[13799]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-08T11:34:07.1980000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1830.0) - Current Channel (Broad) 

Event[13800]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-08T11:34:07.1970000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13801]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-08T11:34:07.1970000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[13802]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T11:30:33.1540000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[13803]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:17:55.6970000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13804]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:17:55.6890000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000003). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13805]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:17:50.8170000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000003). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13806]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T11:17:46.6860000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13807]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:10:53.1210000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000220000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13808]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T11:10:53.1110000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13809]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:08:46.0390000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13810]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:08:46.0320000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13811]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:08:41.1390000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13812]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-08T11:08:38.8950000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[13813]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T11:08:37.0290000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13814]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-08T11:07:39.0040000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13815]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-08T11:07:25.2110000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 5 to 7.

Reason InputAccelerometer 

BootId: 3 

Event[13816]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T11:05:29.1470000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13817]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T11:03:24.7570000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13818]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:02:29.0170000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000820000003). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13819]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T11:02:29.0080000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[13820]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:00:25.1860000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000820000003). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13821]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:00:25.1650000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13822]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:00:25.0550000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13823]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T11:00:25.0390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000320000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13824]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-08T10:59:35.3740000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[13825]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T10:59:28.1960000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000320000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13826]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T10:59:28.1790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000003). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13827]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T10:59:28.0330000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000003). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13828]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T10:59:27.9960000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13829]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-08T10:59:24.3400000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason SessionUnlock 

BootId: 3 

Event[13830]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T10:59:11.9590000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13831]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T10:59:11.9450000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000003). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13832]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-08T10:59:11.8450000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000003). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[13833]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-08T10:58:14.4430000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13834]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 18764. 

Event[13835]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 18764. 

Event[13836]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[13837]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[13838]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[13839]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[13840]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[13841]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5400000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[13842]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[13843]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[13844]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[13845]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{67b28919-ad9f-11ee-8944-086ac578260b}" 

Event[13846]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[13847]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[13848]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[13849]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[13850]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[13851]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[13852]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[13853]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca3-31dd-9ba 

Event[13854]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 2; device name: \Volume{234e3a45-fca3-31dd-9bac-204183070f1e}. 

Event[13855]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[13856]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca3-31dd-9bac-204183070f1e}" created 

Event[13857]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[13858]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[13859]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[13860]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[13861]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[13862]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 2l 

Event[13863]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[13864]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[13865]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-08T10:58:04.5360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[13866]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-08T10:58:01.4340000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13867]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-08T10:57:58.7030000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[13868]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-08T10:57:56.8410000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13869]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T10:57:38.2700000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\AdobeNotificationClient_enpm4xejd91yc\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\c8cc5933513302b2_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[13870]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T10:57:38.2670000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\UserClasses.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[13871]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T10:57:38.2640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\AdobeNotificationClient_enpm4xejd91yc\SystemAppData\Helium\User.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[13872]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-08T10:57:30.6290000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[13873]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-08T10:57:26.9660000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13874]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-08T10:57:26.9570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[13875]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-08T10:57:26.6210000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[13876]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-08T10:57:26.3710000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[13877]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-08T10:57:25.8340000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 2 to 4.

Reason Unknown 

BootId: 3 

Event[13878]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-08T10:57:25.6670000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 2.

Reason SxTransition 

BootId: 3 

Event[13879]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-08T10:57:25.6660000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[13880]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-08T10:57:25.6660000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[13881]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-08T10:57:25.6660000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[13882]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-08T10:57:25.0510000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[13883]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-08T10:57:24.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?08T10:57:24.500000000Z from ?2024?-?01?-?07T23:24:08.914712600Z.
Time Delta: 41595585 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?08T10:57:24.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[13884]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T23:24:08.9140000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[13885]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T23:24:03.4530000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[13886]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T23:24:03.2550000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason ScreenOffGracePeriod 

BootId: 3 

Event[13887]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T23:24:03.2530000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[13888]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-07T23:24:02.7810000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[13889]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13890]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13891]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13892]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13893]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13894]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9450000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13895]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13896]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13897]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13898]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.9090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13899]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13900]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13901]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13902]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13903]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13904]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13905]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13906]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13907]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8260000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13908]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13909]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.8080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13910]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13911]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7880000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13912]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13913]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13914]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13915]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13916]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13917]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13918]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13919]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13920]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.7040000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13921]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6960000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13922]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6870000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13923]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6790000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13924]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13925]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13926]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13927]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13928]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13929]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13930]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13931]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.6020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13932]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13933]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13934]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13935]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5690000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13936]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5610000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13937]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5540000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13938]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13939]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13940]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13941]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13942]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.5080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13943]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13944]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13945]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13946]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13947]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4680000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13948]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13949]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13950]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4420000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13951]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13952]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13953]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13954]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13955]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.4010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13956]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13957]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13958]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3780000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13959]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3700000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13960]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3620000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13961]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13962]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13963]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13964]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13965]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13966]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13967]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13968]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.3000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13969]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2920000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13970]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2840000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13971]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13972]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13973]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13974]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13975]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13976]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2340000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13977]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13978]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.2180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13979]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.1760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13980]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.1630000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13981]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T23:23:57.1410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[13982]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[13983]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[13984]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[13985]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[13986]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[13987]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[13988]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[13989]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[13990]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[13991]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[13992]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[13993]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[13994]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[13995]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[13996]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{67b2815e-ad9f-11ee-8944-086ac578260b}" 

Event[13997]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[13998]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[13999]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[14000]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T23:23:56.0950000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[14001]
  Log Name: System
  Source: User32
  Date: 2024-01-07T23:23:55.3560000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: power off
 Comment:  

Event[14002]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T22:59:59.6780000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14003]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T22:59:59.6720000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14004]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T22:34:08.0440000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14005]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T22:28:08.7310000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14006]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T22:28:08.7100000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14007]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T22:28:03.8170000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14008]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T22:27:59.6980000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14009]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T22:22:49.7420000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14010]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T22:20:45.4760000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14011]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T22:20:01.3360000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\S-1-5-21-3895105365-1596249831-3510329673-1001\SystemAppData\Helium\Cache\cbea4c70310ea64c_COM15.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14012]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T22:20:01.3340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\SystemAppData\Helium\UserClasses.dat was cleared updating 7 keys and creating 1 modified pages. 

Event[14013]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T22:20:01.3330000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\SystemAppData\Helium\User.dat was cleared updating 8 keys and creating 1 modified pages. 

Event[14014]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:53:45.6080000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14015]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T21:53:45.5770000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14016]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:51:38.4210000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14017]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:51:38.4170000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14018]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:51:33.6060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14019]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T21:51:29.4120000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14020]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:20:36.7970000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000520000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14021]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T21:20:36.7900000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14022]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:18:21.5580000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000520000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14023]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:18:21.5460000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000720000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14024]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:18:16.8050000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000720000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14025]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T21:18:12.5420000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14026]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:09:17.0390000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000E20000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14027]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T21:09:17.0170000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14028]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T21:08:30.3840000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKslb34f1634
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6B9202AD-A492-444E-B171-7213F4664072}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14029]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T21:08:30.3440000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1801.0) - Current Channel (Broad) 

Event[14030]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T21:08:25.9240000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.403.1801.0) - Current Channel (Broad) 

Event[14031]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T21:08:25.9240000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14032]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:07:01.8680000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000E20000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14033]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:07:01.8620000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000420000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14034]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:06:57.0420000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000420000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14035]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T21:06:52.8550000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14036]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T21:06:01.8390000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14037]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:02:06.4100000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14038]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T21:02:06.3830000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14039]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T21:00:33.6580000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsld193104d
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{72648433-E62C-4647-A5AC-8891D652F106}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14040]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:00:02.5160000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14041]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:00:02.5050000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14042]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:00:02.4070000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14043]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T21:00:02.3970000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000820000002). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14044]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T21:00:01.8250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.SecurityAppBroker
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14045]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T21:00:01.8250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14046]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:59:42.4630000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000820000002). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14047]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:59:42.4500000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00000820000001). Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14048]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:59:42.3260000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00000820000001). Status: 0x0. Process Id 0x3FB0 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14049]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:59:02.9210000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14050]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:59:02.9210000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14051]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:59:02.9210000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14052]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:59:02.9210000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14053]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:59:02.9060000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14054]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:59:02.9060000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14055]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:59:02.9060000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14056]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:59:02.9060000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14057]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:58:52.6890000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsTerminal_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14058]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:58:44.4090000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14059]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:58:40.6110000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Focusrite USB Audio
Service File Name:  \SystemRoot\System32\drivers\FocusriteUsbAudio.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14060]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:58:40.3530000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Focusrite USB Driver
Service File Name:  \SystemRoot\System32\drivers\FocusriteUsb.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14061]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:36.6590000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[14062]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 27008. 

Event[14063]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 27008. 

Event[14064]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4370000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[14065]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[14066]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[14067]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[14068]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4360000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[14069]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[14070]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[14071]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[14072]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{67b2815e-ad9f-11ee-8944-086ac578260b}" 

Event[14073]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[14074]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[14075]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[14076]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[14077]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[14078]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[14079]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[14080]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[14081]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[14082]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[14083]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[14084]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[14085]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[14086]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[14087]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[14088]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[14089]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[14090]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[14091]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[14092]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:58:34.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[14093]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:58:33.3890000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14094]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:58:32.8040000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscCloudBackupProvider
 and APPID 
Unavailable
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14095]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:58:30.6680000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscCloudBackupProvider
 and APPID 
Unavailable
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14096]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:58:30.0610000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14097]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:58:27.3570000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14098]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:58:11.0010000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14099]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-07T20:58:06.9250000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[14100]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-07T20:58:06.7500000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[14101]
  Log Name: System
  Source: TPM
  Date: 2024-01-07T20:58:05.7030000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[14102]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:03.1820000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/faac28f5-98e7-406a-a9c0-bff8412c6270/) to URL group (0xFE00000C20000001). Status: 0x0. Process Id 0x13A4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14103]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:03.1820000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000C20000001. Status 0x0. Process Id 0x13A4 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14104]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:58:01.5100000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14105]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:58:01.5080000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14106]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:58:01.3550000Z
  Event ID: 15
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Hive \??\C:\WINDOWS\AppCompat\Programs\Amcache.hve was reorganized with a starting size of 9396224 bytes and an ending size of 7696384 bytes. 

Event[14107]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-07T20:58:01.1840000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[14108]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:58:01.0840000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from auto start to demand start. 

Event[14109]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:58:00.8470000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[14110]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.7110000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x1504 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[14111]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.7110000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000820000001. Status 0x0. Process Id 0x1504 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[14112]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T20:58:00.6840000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[14113]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T20:58:00.6400000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[14114]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14115]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14116]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14117]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14118]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14119]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14120]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14121]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14122]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14123]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14124]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14125]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14126]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14127]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14128]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14129]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14130]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:58:00.5980000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14131]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T20:58:00.3830000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[14132]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-07T20:57:59.8060000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[14133]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T20:57:59.8010000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[14134]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T20:57:59.8010000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[14135]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T20:57:59.8000000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[14136]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:59.7880000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14137]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:59.7850000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14138]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:59.7810000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?2060?-?03?-?21T02:17:45.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14139]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:59.7810000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?2060?-?03?-?21T02:17:45.000000000Z) unloaded successfully. 

Event[14140]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:59.7810000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?2060?-?03?-?21T02:17:45.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14141]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:59.7720000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14142]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:59.7650000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14143]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:59.7600000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14144]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-07T20:57:58.6560000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[14145]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-07T20:57:58.6560000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[14146]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-07T20:57:58.6510000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[14147]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.6440000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[14148]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.6430000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[14149]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.6320000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[14150]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.6290000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[14151]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.6150000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[14152]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.6130000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[14153]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.6120000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[14154]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.6060000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[14155]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.5950000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[14156]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.5910000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[14157]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T20:57:58.5760000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[14158]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-07T20:57:58.5510000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[14159]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-07T20:57:58.5510000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[14160]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-07T20:57:56.9330000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[14161]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:57:56.4060000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[14162]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T20:57:55.9620000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[14163]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T20:57:55.7180000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[14164]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T20:57:54.7150000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[14165]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T20:57:54.5630000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[14166]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-07T20:57:52.8990000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[14167]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T20:57:52.1100000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[14168]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T20:57:51.9200000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14169]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T20:57:51.9200000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14170]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T20:57:51.8570000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14171]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T20:57:51.8570000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14172]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T20:57:51.8410000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14173]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T20:57:51.8260000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[14174]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-07T20:57:51.8260000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[14175]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-07T20:57:51.7630000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[14176]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7700000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14177]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7690000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14178]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7680000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14179]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14180]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7610000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14181]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7600000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14182]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7590000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14183]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7580000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14184]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7520000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14185]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7510000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14186]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7470000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14187]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14188]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7430000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14189]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7420000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14190]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14191]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14192]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7340000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14193]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7330000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14194]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7290000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14195]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7280000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14196]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7270000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14197]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7260000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14198]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7250000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14199]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T20:57:51.7120000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[14200]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T20:57:51.4000000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[14201]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T20:57:51.3880000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[14202]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T20:57:51.3820000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[14203]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:51.3610000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14204]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:51.2630000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14205]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T20:57:51.1690000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[14206]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:46.5530000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14207]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:46.5520000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14208]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:57:46.5510000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14209]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-07T20:57:45.1270000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[14210]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:57:45.0810000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[14211]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:57:45.0760000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[14212]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:57:45.0760000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[14213]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:57:45.0760000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[14214]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:57:45.0760000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?07T20:57:44.000000000Z. 

Event[14215]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:57:45.0760000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[14216]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:57:45.0760000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[14217]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:57:45.0760000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[14218]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:57:45.0760000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[14219]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:57:45.0760000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?07T20:57:44.500000000Z. 

Event[14220]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:57:10.9510000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?07T20:57:10.951418500Z. 

Event[14221]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T20:57:10.7970000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[14222]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T20:57:10.0110000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Reboot 
Event Code: 0x0 
Reason: Kernel API 

Event[14223]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T20:57:06.1910000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[14224]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T20:57:06.1850000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[14225]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:57:06.0010000Z
  Event ID: 7000
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service failed to start due to the following error: 
The service did not start due to a logon failure. 

Event[14226]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:57:06.0010000Z
  Event ID: 7038
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AdskLicensingService service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: 
The request is not supported.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 

Event[14227]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:57:05.4420000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00001220000001. Status 0x0. Process Id 0x11C8 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14228]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:57:05.4420000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/b2b1e324-de44-44e7-9824-cfe5ec702f80/) from URL group (0xFE00001220000001). Process Id 0x11C8 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14229]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T20:57:59.8460000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 15 seconds. 

Event[14230]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T20:57:59.8450000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[14231]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T20:57:59.8450000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[14232]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T20:57:05.0370000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[14233]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T20:57:05.0370000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[14234]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-07T20:57:05.0260000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[14235]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-07T20:57:05.0260000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[14236]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T20:57:05.0200000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[14237]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T20:57:05.0200000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[14238]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:57:05.0000000Z
  Event ID: 7031
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Autodesk Desktop Licensing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 

Event[14239]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T20:57:05.0330000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[14240]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-07T20:57:02.8730000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[14241]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.4130000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14242]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.4050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14243]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3950000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14244]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3860000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14245]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3760000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14246]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3670000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14247]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3590000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14248]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14249]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3430000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14250]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3330000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14251]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3230000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14252]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3150000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14253]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3070000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14254]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.3000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14255]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14256]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14257]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14258]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14259]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2550000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14260]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14261]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2380000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14262]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2280000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14263]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14264]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14265]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.2000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14266]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14267]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14268]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14269]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14270]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14271]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1470000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14272]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14273]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1290000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14274]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14275]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14276]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.1020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14277]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0940000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14278]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14279]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14280]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0660000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14281]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0580000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14282]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0500000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14283]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14284]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0320000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14285]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0240000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14286]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0140000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14287]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:58.0050000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14288]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14289]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9890000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14290]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14291]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9710000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14292]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14293]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9480000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14294]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9360000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14295]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9250000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14296]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9170000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14297]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.9080000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14298]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8980000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14299]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14300]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14301]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8720000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14302]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8600000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14303]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14304]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8400000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14305]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8310000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14306]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8220000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14307]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8120000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14308]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.8020000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14309]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7930000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14310]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7850000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14311]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7750000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14312]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7650000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14313]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7560000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14314]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7460000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14315]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7370000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14316]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7270000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14317]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7190000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14318]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14319]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.7000000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14320]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14321]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6830000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14322]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14323]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14324]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6570000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14325]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6490000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14326]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6390000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14327]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6300000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14328]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6210000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14329]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6100000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14330]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.6010000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14331]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.5910000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14332]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.5810000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14333]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.5730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14334]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.3090000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14335]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.2990000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14336]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.2900000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14337]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.2800000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14338]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.2730000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14339]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.2640000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14340]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.2520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14341]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.2410000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14342]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.2110000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14343]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.1970000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14344]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.1820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14345]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:56:57.1520000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. 

Event[14346]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[14347]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[14348]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[14349]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[14350]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[14351]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[14352]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[14353]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[14354]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[14355]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[14356]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" 

Event[14357]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[14358]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7260000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[14359]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[14360]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{7c2669ff-ad66-11ee-8943-086ac578260b}" 

Event[14361]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[14362]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca3-31dd-9bac-2041830 

Event[14363]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[14364]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:56:56.7250000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[14365]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:56:34.0010000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Focusrite Thunderbolt Audio Root
Service File Name:  \SystemRoot\System32\drivers\FocusritePCIeSwRoot.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14366]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:56:33.7160000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Focusrite USB Audio Root service was changed from disabled to demand start. 

Event[14367]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:56:31.6630000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Usb Software Root service was changed from demand start to disabled. 

Event[14368]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:52:33.5180000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[14369]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:50:14.0120000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000D20000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14370]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:50:13.9630000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14371]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:48:06.0960000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000D20000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14372]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:48:06.0790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000002). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14373]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:48:05.9740000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000002). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14374]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:48:05.9660000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000008). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14375]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:47:50.7990000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000008). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14376]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:47:50.7910000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFC00001220000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14377]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:47:45.9140000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFC00001220000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14378]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:47:41.7850000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14379]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:46:31.2390000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14380]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:33:57.4430000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000003). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14381]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:33:57.4280000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14382]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:31:07.6970000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000003). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14383]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:31:07.6790000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000820000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14384]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:31:07.5790000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000820000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14385]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:31:07.5730000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001020000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14386]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:30:44.3150000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14387]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:30:43.7370000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14388]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:30:43.7290000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000007). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14389]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:30:38.8620000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000007). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14390]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:30:34.7250000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14391]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:26:35.1380000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14392]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:25:09.1520000Z
  Event ID: 3
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Filter Manager failed to attach to volume '\Device\Harddisk5\DR6'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C. 

Event[14393]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:25:09.1520000Z
  Event ID: 3
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Filter Manager failed to attach to volume '\Device\Harddisk5\DR6'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C. 

Event[14394]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T20:24:50.9920000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FsDepends' (10.0, ?2056?-?03?-?07T17:54:55.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14395]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:24:43.5670000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\WINDOWS\System32\config\DRIVERS (TM: {7c266c18-ad66-11ee-8943-086ac578260b}, RM: {7c266c17-ad66-11ee-8943-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[14396]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:24:43.5460000Z
  Event ID: 11
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
TxR init phase for hive \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy3\WINDOWS\System32\config\SYSTEM (TM: {7c266c15-ad66-11ee-8943-086ac578260b}, RM: {7c266c14-ad66-11ee-8943-086ac578260b}) finished with result=0xC00000A2 (Internal code=7). 

Event[14397]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:24:31.0460000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14398]
  Log Name: System
  Source: Virtual Disk Service
  Date: 2024-01-07T20:24:16.8650000Z
  Event ID: 3
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Service started. 

Event[14399]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:22:54.2330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000002). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14400]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:22:54.2230000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14401]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:20:52.6190000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from demand start to auto start. 

Event[14402]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:20:33.3090000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000002). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14403]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:20:33.3040000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001120000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14404]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:20:28.5060000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001120000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14405]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:20:24.2990000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14406]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T20:16:35.4420000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy3) is healthy.  No action is needed. 

Event[14407]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T20:16:35.3500000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy2) is healthy.  No action is needed. 

Event[14408]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:14:23.0920000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000004). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14409]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:14:23.0830000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14410]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:14:03.0770000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14411]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:13:33.5570000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14412]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T20:13:20.1780000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 5 to 7.

Reason InputAccelerometer 

BootId: 2 

Event[14413]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:13.9810000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NT52VQ39BVN-Microsoft.LanguageExperiencePacken-GB 

Event[14414]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:13:13.6640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.LanguageExperiencePacken-GB_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14415]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:13.5360000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NT52VQ39BVN-Microsoft.LanguageExperiencePacken-GB 

Event[14416]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:12.8610000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9MV0B5HZVK9Z-Microsoft.GamingApp 

Event[14417]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:13:12.3100000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.GamingApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14418]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:12.0980000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MV0B5HZVK9Z-Microsoft.GamingApp 

Event[14419]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:13:10.8350000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GamingApp_2312.1001.18.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14420]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:08.1880000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9MSMLRH6LZF3-Microsoft.WindowsNotepad 

Event[14421]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:13:07.6160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsNotepad_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14422]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:07.4530000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MSMLRH6LZF3-Microsoft.WindowsNotepad 

Event[14423]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:13:06.3710000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsNotepad_11.2311.33.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14424]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:05.4510000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14425]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:03.7960000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NFTCH6J7FHV-Microsoft.PowerAutomateDesktop 

Event[14426]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:13:03.5380000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14427]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:03.3820000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NFTCH6J7FHV-Microsoft.PowerAutomateDesktop 

Event[14428]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:13:00.1240000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14429]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:59.3430000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14430]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:56.5140000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9P1J8S7CCWWT-Clipchamp.Clipchamp 

Event[14431]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:55.3910000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Clipchamp.Clipchamp_yxz26nhyzhsrt\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14432]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:55.2330000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9P1J8S7CCWWT-Clipchamp.Clipchamp 

Event[14433]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:54.8580000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14434]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:53.6030000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Clipchamp.Clipchamp_2.8.3.0_neutral__yxz26nhyzhsrt\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14435]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:53.1910000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9MZ95KL8MR0L-Microsoft.ScreenSketch 

Event[14436]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:53.1910000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14437]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:51.8700000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MZ95KL8MR0L-Microsoft.ScreenSketch 

Event[14438]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:49.5680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ScreenSketch_11.2310.54.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14439]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:48.7050000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14440]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:39.1920000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFHWKN-MICROSOFT.WINDOWSSOUNDRECORDER 

Event[14441]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:38.8930000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14442]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:38.7400000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFHWKN-MICROSOFT.WINDOWSSOUNDRECORDER 

Event[14443]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:38.3980000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14444]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:36.7870000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsSoundRecorder_1.0.67.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14445]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:36.4040000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NCTDW2W1BH8-Microsoft.RawImageExtension 

Event[14446]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:36.1130000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.RawImageExtension_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14447]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:36.0160000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NCTDW2W1BH8-Microsoft.RawImageExtension 

Event[14448]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:12:33.5200000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout. 

Event[14449]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:32.2150000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14450]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:32.2150000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14451]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:29.0490000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9NBLGGH5R558-Microsoft.Todos 

Event[14452]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:29.0120000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9N0DX20HK701-Microsoft.WindowsTerminal. 

Event[14453]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:28.9940000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14454]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:28.6960000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9N0DX20HK701-Microsoft.WindowsTerminal 

Event[14455]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:28.5720000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9P7BP5VNWKX5-MicrosoftCorporationII.QuickAssist 

Event[14456]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:28.5680000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Todos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14457]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:28.3860000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9NBLGGH5R558-Microsoft.Todos 

Event[14458]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:28.2060000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14459]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:27.9330000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9P7BP5VNWKX5-MicrosoftCorporationII.QuickAssist 

Event[14460]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:27.8450000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.18.3181.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14461]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:27.5340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Todos_0.110.63211.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14462]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:24.1610000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14463]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:22.2070000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFHVFW-Microsoft.BingNews 

Event[14464]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:21.7980000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14465]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:21.5720000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFHVFW-Microsoft.BingNews 

Event[14466]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:21.4320000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14467]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:21.4320000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14468]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:20.1130000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather 

Event[14469]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:19.8480000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingNews_4.55.62231.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14470]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:19.4810000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 5 keys and creating 1 modified pages. 

Event[14471]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:19.0520000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9WZDNCRFJ3Q2-Microsoft.BingWeather 

Event[14472]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:12:17.6270000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingWeather_3.2.8.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14473]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:16.8440000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14474]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T20:12:15.5870000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 4 to 5.

Reason SessionUnlock 

BootId: 2 

Event[14475]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:13.2230000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14476]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:13.2230000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14477]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T20:12:13.2230000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14478]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:12:11.2250000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000004). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14479]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:12:11.2110000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000006). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14480]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:12:11.1010000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000006). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14481]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:12:11.0880000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000A20000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14482]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:12:03.2040000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000A20000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14483]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:12:03.1910000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00000620000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14484]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T20:12:03.0800000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00000620000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14485]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:11:05.6510000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14486]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 29284. 

Event[14487]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 29284. 

Event[14488]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[14489]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[14490]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[14491]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[14492]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8420000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[14493]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8410000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[14494]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[14495]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[14496]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[14497]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{7c2669ff-ad66-11ee-8943-086ac578260b}" 

Event[14498]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[14499]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[14500]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[14501]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[14502]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e} 

Event[14503]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8390000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[14504]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[14505]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca3-31dd-9ba 

Event[14506]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 2; device name: \Volume{234e3a45-fca3-31dd-9bac-204183070f1e}. 

Event[14507]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[14508]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca3-31dd-9bac-204183070f1e}" created 

Event[14509]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[14510]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[14511]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[14512]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca3-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[14513]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[14514]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 2l 

Event[14515]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[14516]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[14517]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T20:10:55.8380000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[14518]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:10:54.4180000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14519]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:10:51.8250000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.OneDriveSync_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14520]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T20:10:50.8480000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14521]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:10:48.1520000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14522]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:10:26.2990000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Settings\settings.dat was cleared updating 11 keys and creating 1 modified pages. 

Event[14523]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T20:10:24.5160000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[14524]
  Log Name: System
  Source: Microsoft-Windows-Power-Troubleshooter
  Date: 2024-01-07T20:10:23.9670000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The system has returned from a low power state.

Sleep Time: ?2024?-?01?-?07T15:13:48.349563500Z
Wake Time: ?2024?-?01?-?07T20:10:22.878696100Z

Wake Source: Unknown 

Event[14525]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:10:23.7270000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14526]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T20:10:23.7230000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14527]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-07T20:10:23.2650000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[14528]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T20:10:23.0630000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 2 to 4.

Reason Unknown 

BootId: 2 

Event[14529]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T20:10:22.7900000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system session has transitioned from 1 to 2.

Reason SxTransition 

BootId: 2 

Event[14530]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:10:22.7890000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[14531]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:10:22.7890000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
There are 0x2 boot options on this system. 

Event[14532]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T20:10:22.7890000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[14533]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-07T20:10:22.5750000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[14534]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T20:10:22.0580000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[14535]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T20:10:21.5000000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system time has changed to ?2024?-?01?-?07T20:10:21.500000000Z from ?2024?-?01?-?07T15:13:53.533429700Z.
Time Delta: 17787966 ms

Change Reason: System time synchronized with the hardware clock.
Process: '' (PID 4).

RTC time: ?2024?-?01?-?07T20:10:21.500000000Z
Current time zone bias: 0
RTC time is in UTC: false
System time was based on RTC time: false 

Event[14536]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T15:13:53.5330000Z
  Event ID: 107
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has resumed from sleep. 

Event[14537]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T15:13:48.6050000Z
  Event ID: 42
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system is entering sleep.

Sleep Reason: Application API 

Event[14538]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T15:13:48.3520000Z
  Event ID: 566
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The system session has transitioned from 0 to 1.

Reason ScreenOffGracePeriod 

BootId: 2 

Event[14539]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T15:13:48.3490000Z
  Event ID: 187
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User-mode process attempted to change the system state by calling SetSuspendState or SetSystemPowerState APIs. 

Event[14540]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-07T15:13:47.8830000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-off Notification for Customer Experience Improvement Program 

Event[14541]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event release. 

Event[14542]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished deleting device. 

Event[14543]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting volume device object. 

Event[14544]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removing mount entry. 

Event[14545]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[14546]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[14547]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[14548]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Deleting device object. 

Event[14549]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Cleaning up all change notification waiters. 

Event[14550]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Stopping FCB garbage collector. 

Event[14551]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting unmount for device "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" 

Event[14552]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[14553]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\DosDevices\G:" 

Event[14554]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is disabled for this device or dokan initiated deletion; ignoring. 

Event[14555]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link deleted: "\??\Volume{7c266412-ad66-11ee-8943-086ac578260b}" 

Event[14556]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
70f1e}" 

Event[14557]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Issuing a clean mount manager delete for device "\Device\Volume{234e3a45-fca2-31dd-9bac-2041830 

Event[14558]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event release. 

Event[14559]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T15:13:41.0560000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Unmounting due to keepalive close. 

Event[14560]
  Log Name: System
  Source: User32
  Date: 2024-01-07T15:13:37.6160000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The process C:\Windows\System32\RuntimeBroker.exe (PC-MAIN) has initiated the power off of computer PC-MAIN on behalf of user PC-MAIN\felip for the following reason: Other (Unplanned)
 Reason Code: 0x0
 Shut-down Type: power off
 Comment:  

Event[14561]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:59:52.6750000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14562]
  Log Name: System
  Source: Microsoft-Windows-UserModePowerService
  Date: 2024-01-07T14:52:07.5660000Z
  Event ID: 22
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Reapply power settings upon completion of the provisioning engine's turn 5 

Event[14563]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:52:05.2900000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14564]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:54.9360000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NVIDIACorp.NVIDIAControlPanel_56jybvy8sckqj\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14565]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:54.6310000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[14566]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:54.1850000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 6 keys and creating 1 modified pages. 

Event[14567]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:53.7520000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14568]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:52.7960000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[14569]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:51.8490000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WindowsMaps_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14570]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:51.4670000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\SpotifyAB.SpotifyMusic_zpdnekdrzrea0\Settings\settings.dat was cleared updating 2 keys and creating 1 modified pages. 

Event[14571]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:50.8120000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WebMediaExtensions_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14572]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:50.1430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14573]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:49.4620000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Win32WebViewHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14574]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:48.7840000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14575]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:47.4360000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ECApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14576]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:46.8350000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.CredDialogHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14577]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:46.1780000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.AsyncTextService_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14578]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:45.5200000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.AccountsControl_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14579]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:44.8480000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14580]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:44.2200000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14581]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:43.5320000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14582]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:42.9010000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\1527c705-839a-4832-9118-54d4Bd6a0c89_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14583]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:42.2600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14584]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:41.3100000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.XGpuEjectDialog_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14585]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:40.7260000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14586]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:40.1570000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14587]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:39.6090000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.CallingShellApp_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14588]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:38.9930000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Windows.PrintDialog_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14589]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:38.4080000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14590]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:37.7320000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14591]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:37.1300000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14592]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:36.4940000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\NcsiUwpApp_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14593]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:35.9010000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.CapturePicker_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14594]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T14:29:33.5470000Z
  Event ID: 20
  Task: Windows Update Agent 
  Level: Error s
  Opcode: Installation  
  Keyword: Installation,Failure, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Failure: Windows failed to install the following update with error 0x80073D02: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience. 

Event[14595]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T14:29:33.3830000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience 

Event[14596]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:32.3140000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14597]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T14:29:32.3120000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: 9PCFS5B6T72H-Microsoft.Paint 

Event[14598]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:31.0940000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Paint_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14599]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T14:29:30.8650000Z
  Event ID: 43
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Started: Windows has started installing the following update: 9PCFS5B6T72H-Microsoft.Paint 

Event[14600]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:29:30.7280000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume ?? (\Device\HarddiskVolumeShadowCopy1) is healthy.  No action is needed. 

Event[14601]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:29.8600000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.NarratorQuickStart_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14602]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:29.0970000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Windows.CBSPreview_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14603]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:29:21.7340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Paint_11.2311.28.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14604]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T14:29:07.3500000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14605]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T14:29:07.3500000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14606]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T14:28:25.9290000Z
  Event ID: 44
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Download  n
  Keyword: Download,Started, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Windows Update started downloading an update. 

Event[14607]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:23:35.8780000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\drive_fs_notification" 

Event[14608]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:21:25.3520000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000002). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14609]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:21:25.3320000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14610]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:21:13.5270000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.HEIFImageExtension_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14611]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:19:32.9130000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.WebpImageExtension_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14612]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:17:31.6120000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000002). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14613]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:17:31.6070000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001620000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14614]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:17:31.5110000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001620000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14615]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:17:31.5050000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000005). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14616]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:16:38.7420000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.VP9VideoExtensions_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14617]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:35.4900000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000005). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14618]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:35.4850000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000003). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14619]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:35.3880000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000003). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14620]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:35.3830000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000004). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14621]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:30.8150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000004). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14622]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:30.8100000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000002). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14623]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:30.7150000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000002). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14624]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:30.7090000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000003). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14625]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:26.7380000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000003). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14626]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:26.7330000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001420000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14627]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:26.6310000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001420000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14628]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:26.6250000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000002). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14629]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:10.4950000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000002). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14630]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:10.4890000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Removed URL (http://*:2869/upnp/eventing/) from URL group (0xFE00001520000001). Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14631]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:16:10.3850000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:2869/upnp/eventing/) to URL group (0xFE00001520000001). Status: 0x0. Process Id 0x2368 Executable path \Device\HarddiskVolume9\Windows\System32\svchost.exe, User S-1-5-19 

Event[14632]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:15:50.5700000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logitech G HUB Virtual HID Device Driver
Service File Name:  \SystemRoot\system32\drivers\logi_joy_vir_hid.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14633]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:15:42.0300000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MpKsl6b14ba9f
Service File Name:  C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{72648433-E62C-4647-A5AC-8891D652F106}\MpKslDrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14634]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T14:15:39.3770000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14635]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:15:35.5760000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14636]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T14:15:35.3250000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14637]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T14:15:32.4230000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14638]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Activating keepalive handle from process 33656. 

Event[14639]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened keepalive file from process 33656. 

Event[14640]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4320000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Opened file with user mode dispatch blocked: "\__drive_fs_keepalive" 

Event[14641]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "\$Extend\$Reparse:$R:$INDEX_ALLOCATION" 

Event[14642]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[14643]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Handle created before IOCTL_EVENT_WAIT for file "(null)" 

Event[14644]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finished event start with status 1 and flags: 0 

Event[14645]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4310000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning actual mount point G 

Event[14646]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting successfully done. 

Event[14647]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link name matches the current one. 

Event[14648]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\DosDevices\G:" 

Event[14649]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Link created: "\??\Volume{7c266412-ad66-11ee-8943-086ac578260b}" 

Event[14650]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Returning suggested name: "\DosDevices\G:" 

Event[14651]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount manager is querying for desired drive letter. ForceDriveLetterAutoAssignment = 0 

Event[14652]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Starting FCB garbage collector with 2000 ms interval. 

Event[14653]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mount entry found: \DosDevices\G: -> \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[14654]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Found entry with matching device name: \Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e} 

Event[14655]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 1; mount point = . 

Event[14656]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
c-204183070f1e}" 

Event[14657]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4290000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Mounting volume using MountPoint "\DosDevices\G:" device "\Device\Volume{234e3a45-fca2-31dd-9ba 

Event[14658]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Event start using mount ID: 1; device name: \Volume{234e3a45-fca2-31dd-9bac-204183070f1e}. 

Event[14659]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Inserted new mount entry. 

Event[14660]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
ume{234e3a45-fca2-31dd-9bac-204183070f1e}" created 

Event[14661]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
SymbolicLink: "\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}" -> "\Device\Vol 

Event[14662]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
; type: 8 


Event[14663]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
\DosDevices\Global\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; mount point: "\DosDevices\G:" 

Event[14664]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
disk device name: "\Device\Volume{234e3a45-fca2-31dd-9bac-204183070f1e}"; symbolic link name: " 

Event[14665]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Set volume security descriptor successfully. 

Event[14666]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Creating disk device; mount point = G; mount ID = 1l 

Event[14667]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
No mount entry found. 

Event[14668]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Finding mount entry; lockGlobal = 0; mount point = \DosDevices\G:. 

Event[14669]
  Log Name: System
  Source: googledrivefs31357
  Date: 2024-01-07T14:15:26.4280000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Entered event start. 

Event[14670]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:15:18.3010000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14671]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T14:15:08.0960000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 and APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 to the user PC-MAIN\felip SID (S-1-5-21-3895105365-1596249831-3510329673-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14672]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:15:06.0720000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  cpuz154
Service File Name:  C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14673]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:14:52.5560000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.ScreenSketch_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14674]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:14:51.9700000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  cpuz150
Service File Name:  C:\WINDOWS\temp\cpuz150\cpuz150_x64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14675]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:14:50.2390000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14676]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:14:36.7990000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from auto start to demand start. 

Event[14677]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:13:28.5260000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\Settings\settings.dat was cleared updating 19 keys and creating 7 modified pages. 

Event[14678]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:13:26.8760000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14679]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:13:24.2890000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.BioEnrollment_cw5n1h2txyewy\Settings\settings.dat was cleared updating 1 keys and creating 1 modified pages. 

Event[14680]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:13:23.1030000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\Users\felip\AppData\Local\Packages\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\Settings\settings.dat was cleared updating 3 keys and creating 1 modified pages. 

Event[14681]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T14:13:19.8100000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14682]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T14:13:19.8080000Z
  Event ID: 10016
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: Classic, 
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. 

Event[14683]
  Log Name: System
  Source: Microsoft-Windows-GroupPolicy
  Date: 2024-01-07T14:13:19.5610000Z
  Event ID: 1501
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-21-3895105365-1596249831-3510329673-1001
  User Name: PC-MAIN\felip
  Computer: PC-Main
  Description: 
The Group Policy settings for the user were processed successfully. There were no changes detected since the last successful processing of Group Policy. 

Event[14684]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:13:18.9010000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-20
  User Name: NT AUTHORITY\NETWORK SERVICE
  Computer: PC-Main
  Description: 
The start type of the Delivery Optimization service was changed from demand start to auto start. 

Event[14685]
  Log Name: System
  Source: Microsoft-Windows-Winlogon
  Date: 2024-01-07T14:13:18.7840000Z
  Event ID: 7001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
User Log-on Notification for Customer Experience Improvement Program 

Event[14686]
  Log Name: System
  Source: Microsoft-Windows-GroupPolicy
  Date: 2024-01-07T14:13:18.7560000Z
  Event ID: 1502
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied. 

Event[14687]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:13:18.6900000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Windows Modules Installer service was changed from auto start to demand start. 

Event[14688]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-07T14:13:14.7450000Z
  Event ID: 1034
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Secure Boot Dbx update applied successfully 

Event[14689]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-01-07T14:13:12.5810000Z
  Event ID: 19
  Task: Windows Update Agent 
  Level: Information t
  Opcode: Installation  

  Keyword: Installation,Success, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Installation Successful: Windows successfully installed the following update: Windows 11, version 22H2 

Event[14690]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-07T14:13:09.5180000Z
  Event ID: 1025
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TPM was successfully provisioned and is now ready for use. 

Event[14691]
  Log Name: System
  Source: Microsoft-Windows-TPM-WMI
  Date: 2024-01-07T14:13:09.3090000Z
  Event ID: 1282
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The TBS device identifier has been generated. 

Event[14692]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:13:08.5030000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'WdFilter' (10.0, ?2047?-?04?-?29T00:32:56.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14693]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:48.7040000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCamera_2023.2311.8.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14694]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:47.8640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.DesktopAppInstaller_1.21.3482.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14695]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:45.3570000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Photos_2023.11110.29003.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14696]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:41.7720000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\5319275A.WhatsAppDesktop_2.2349.2.0_x64__cv1g1gvanyjgm\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14697]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:41.0330000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WebMediaExtensions_1.0.62931.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14698]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:40.3640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.YourPhone_1.23102.126.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14699]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:38.3490000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\microsoft.windowscommunicationsapps_16005.14326.21768.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14700]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:36.7040000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_22311.1401.2.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14701]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:12:36.4450000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/b2b1e324-de44-44e7-9824-cfe5ec702f80/) to URL group (0xFE00001220000001). Status: 0x0. Process Id 0x11C8 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14702]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:12:36.4450000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001220000001. Status 0x0. Process Id 0x11C8 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14703]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:34.6190000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneMusic_11.2310.8.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14704]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:32.0240000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsMaps_11.2311.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14705]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:30.7200000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGamingOverlay_6.123.11012.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14706]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:29.4400000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsFeedbackHub_1.2309.12711.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14707]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:27.8420000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ZuneVideo_10.22091.10051.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14708]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:26.2340000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GetHelp_10.2308.12552.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14709]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:25.3320000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAlarms_11.2306.23.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14710]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:24.3580000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsCalculator_11.2307.4.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14711]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:23.3640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14712]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:22.6440000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\NVIDIACorp.NVIDIAControlPanel_8.1.964.0_x64__56jybvy8sckqj\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14713]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:22.1280000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14714]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:14.9050000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.12.10983.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14715]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:13.8420000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsNotepad_11.2112.32.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14716]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:11.6770000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.2.8_8.2304.12003.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14717]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:11.4850000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.2.7_7.2203.17001.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14718]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:11.1420000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Todos_0.54.42772.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14719]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:10.4990000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.SecHealthUI_1000.22621.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14720]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:09.4530000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ScreenSketch_11.2201.12.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14721]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:07.0910000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Paint_11.2201.22.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14722]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:05.0710000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.GamingApp_2105.900.24.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14723]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:04.4730000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BingNews_1.0.1.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14724]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:03.1580000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Clipchamp.Clipchamp_2.2.8.0_neutral__yxz26nhyzhsrt\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14725]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:00.9970000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.2.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14726]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:00.7140000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.6.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14727]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:00.4910000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14728]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:12:00.2350000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\NcsiUwpApp_1000.22621.1.0_neutral_neutral_8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14729]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:59.6660000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.FileExp_1000.22651.1000.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14730]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:58.5360000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.Core_1000.22645.1000.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14731]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:55.6030000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.22681.1000.0_x64__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14732]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:53.2760000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.22621.1.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14733]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:53.0460000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsAppRuntime.CBS_4000.1027.2341.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14734]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:52.7970000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.XGpuEjectDialog_10.0.22621.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14735]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:52.5620000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.22621.2506_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14736]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:52.2140000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.22621.2506_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14737]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:51.8210000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecureAssessmentBrowser_10.0.22621.2506_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14738]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:51.5620000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PrintQueueActionCenter_1.0.1.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14739]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:51.3550000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PinningConfirmationDialog_1000.22621.1.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14740]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:51.1640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.PeopleExperienceHost_10.0.22621.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14741]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:50.9440000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ParentalControls_1000.22621.1.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14742]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:50.7190000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.21302.1000_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14743]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:50.4950000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.21302.1000_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14744]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:50.2860000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.NarratorQuickStart_10.0.22621.1_neutral_neutral_8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14745]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:49.9130000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ContentDeliveryManager_10.0.22621.2506_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14746]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:49.4760000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.22621.2506_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14747]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:49.2160000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14748]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:49.0470000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CallingShellApp_1000.22621.1.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14749]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:48.8540000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.22621.1.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14750]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:48.6510000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.22621.1.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14751]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:48.4430000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Win32WebViewHost_10.0.22621.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14752]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:48.2500000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.UI.Xaml.CBS_8.2305.16002.0_x64__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14753]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:47.8460000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.22621.1_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14754]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:47.6370000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.ECApp_10.0.22621.2506_neutral__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14755]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:47.4400000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14756]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:47.2520000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14757]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:47.0530000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AsyncTextService_10.0.22621.1_neutral__8wekyb3d8bbwe\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14758]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:46.8640000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.22621.1_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14759]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:46.6520000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.19580.1000.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14760]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:46.4110000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.22621.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14761]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:46.2330000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14762]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:46.0230000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.22621.1_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14763]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:11:45.8010000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages. 

Event[14764]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:11:43.6180000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Remote Access IP ARP Driver service was changed from demand start to auto start. 

Event[14765]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:11:43.4610000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Distributed Transaction Coordinator service was changed from auto start to demand start. 

Event[14766]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:11:40.9200000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Distributed Transaction Coordinator service was changed from demand start to auto start. 

Event[14767]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:11:35.7600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14768]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:11:35.7600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14769]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:11:35.7600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14770]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:11:35.7600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14771]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:11:35.7600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14772]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:11:35.7600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14773]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:11:35.7600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14774]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:11:35.7600000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[14775]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:10:44.9940000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14776]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:10:41.7050000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Distributed Transaction Coordinator service was changed from auto start to demand start. 

Event[14777]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:10:41.7040000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Distributed Transaction Coordinator service was changed from demand start to auto start. 

Event[14778]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:10:40.5970000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Program Compatibility Assistant Service service was changed from demand start to auto start. 

Event[14779]
  Log Name: System
  Source: TPM
  Date: 2024-01-07T14:10:38.6750000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[14780]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:10:36.5250000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
dam 

Event[14781]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.4100000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://127.0.0.1:27339:127.0.0.1/AuraSDK/) to URL group (0xFE00000220000001). Status: 0x0. Process Id 0x1360 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[14782]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.4100000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00000220000001. Status 0x0. Process Id 0x1360 Executable path \Device\HarddiskVolume9\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe, User S-1-5-18 

Event[14783]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T14:10:36.3930000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[14784]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T14:10:36.3430000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[14785]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14786]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14787]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14788]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14789]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14790]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14791]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14792]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14793]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14794]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14795]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14796]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14797]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14798]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14799]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14800]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14801]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:10:36.3020000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[14802]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-07T14:10:35.6390000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[14803]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:10:35.6340000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[14804]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:10:35.6330000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[14805]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:10:35.6330000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[14806]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:35.5940000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14807]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:35.5910000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14808]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:35.5890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?2060?-?03?-?21T02:17:45.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14809]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:35.5890000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?2060?-?03?-?21T02:17:45.000000000Z) unloaded successfully. 

Event[14810]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:35.5890000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?2060?-?03?-?21T02:17:45.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14811]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:35.5840000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14812]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:35.5780000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14813]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:35.5730000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14814]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:10:31.4660000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[14815]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-07T14:10:31.2220000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[14816]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-07T14:10:31.2220000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[14817]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-07T14:10:31.2180000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[14818]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.2100000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[14819]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.2100000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[14820]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.1980000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[14821]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.1950000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[14822]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.1820000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[14823]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.1800000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[14824]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.1780000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[14825]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.1730000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[14826]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.1630000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[14827]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.1590000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[14828]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:10:31.1420000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[14829]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-07T14:10:31.1190000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[14830]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-07T14:10:31.1190000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[14831]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-07T14:10:29.5620000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[14832]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:10:29.1530000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[14833]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:10:28.7370000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[14834]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:10:28.4950000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[14835]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:10:27.6350000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[14836]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:10:27.4940000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[14837]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T14:10:27.4700000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[14838]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-07T14:10:25.5630000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[14839]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T14:10:24.9320000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[14840]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:10:24.7590000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14841]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:10:24.7590000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14842]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:10:24.6960000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14843]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:10:24.6960000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14844]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:10:24.6800000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[14845]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:10:24.6650000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP2 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[14846]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-07T14:10:24.6650000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[14847]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-07T14:10:24.6180000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[14848]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.6170000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14849]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.6160000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14850]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.6150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14851]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.6140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14852]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.6080000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14853]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.6070000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14854]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.6060000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14855]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.6050000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[14856]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14857]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5980000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14858]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5940000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14859]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5930000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14860]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5910000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14861]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5900000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14862]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14863]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5880000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14864]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5860000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14865]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5850000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14866]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5840000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14867]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5830000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14868]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5820000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14869]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5810000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14870]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5800000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[14871]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:10:24.5670000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[14872]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T14:10:24.2640000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[14873]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T14:10:24.2530000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[14874]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:24.2300000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14875]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:24.1400000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14876]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:10:24.0930000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[14877]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:19.5220000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14878]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:10:19.5210000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[14879]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-07T14:10:18.1060000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[14880]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:10:18.0650000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[14881]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:10:18.0600000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[14882]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:10:18.0600000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[14883]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:10:18.0600000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[14884]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:10:18.0600000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?07T14:10:16.000000000Z. 

Event[14885]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:10:18.0600000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[14886]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:10:18.0600000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[14887]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:10:18.0600000Z
  Event ID: 26
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A one-time boot sequence was used during this boot. 

Event[14888]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:10:18.0600000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[14889]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:10:18.0590000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?07T14:10:17.500000000Z. 

Event[14890]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:09:45.7930000Z
  Event ID: 13
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The operating system is shutting down at system time ?2024?-?01?-?07T14:09:45.793355800Z. 

Event[14891]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T14:09:45.7190000Z
  Event ID: 577
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system has prepared for a system initiated reboot from Active. 

Event[14892]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:09:45.5700000Z
  Event ID: 117
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: DeleteUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Delete URL group 0xFE00001020000001. Status 0x0. Process Id 0x1030 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14893]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:09:45.5700000Z
  Event ID: 114
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: RemUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Removed URL (http://*:5357/04e0baff-6f5b-4f5b-89d3-c974811e8e96/) from URL group (0xFE00001020000001). Process Id 0x1030 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14894]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T14:09:45.2920000Z
  Event ID: 109
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The kernel power manager has initiated a shutdown transition.

Action: Power Action Reboot 
Event Code: 0x0 
Reason: Kernel API 

Event[14895]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T14:09:44.2920000Z
  Event ID: 4001
  Task: N/A
  Level: Information 
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully stopped.
 

Event[14896]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T14:09:44.2800000Z
  Event ID: 10002
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has stopped.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[14897]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:09:43.2520000Z
  Event ID: 50037
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is stopped. ShutDown Flag value is 1 

Event[14898]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-07T14:09:43.2520000Z
  Event ID: 51057
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStopWithRefCount  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service stop is almost done.DHCP Context Ref count is 1 

Event[14899]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T14:10:35.6490000Z
  Event ID: 6013
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The system uptime is 18 seconds. 

Event[14900]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T14:10:35.6480000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[14901]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T14:10:35.6480000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

Event[14902]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:09:43.1540000Z
  Event ID: 50106
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 is waiting on DHCPv6 service to stop 

Event[14903]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-07T14:09:43.1510000Z
  Event ID: 51047
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStop  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is stopped. ShutDown Flag value is 1 

Event[14904]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:09:43.1450000Z
  Event ID: 50105
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client ProcessDHCPRequestForever received TERMINATE_EVENT 

Event[14905]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:09:43.1450000Z
  Event ID: 50104
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client received shutdown notification 

Event[14906]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:43.1040000Z
  Event ID: 7043
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AsusUpdateCheck service did not shut down properly after receiving a pre-shutdown control. 

Event[14907]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T14:09:43.1470000Z
  Event ID: 6006
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was stopped. 

Event[14908]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:09:37.8510000Z
  Event ID: 113
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: AddUrl  i
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to add URL (http://*:5357/04e0baff-6f5b-4f5b-89d3-c974811e8e96/) to URL group (0xFE00001020000001). Status: 0x0. Process Id 0x1030 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14909]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:09:37.8510000Z
  Event ID: 111
  Task: HTTP Configuration Property Trace Task 
  Level: Information r
  Opcode: CreateUrlGroup  
  Keyword: Flagged on all HTTP events triggered on a URL group, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Create URL group 0xFE00001020000001. Status 0x0. Process Id 0x1030 Executable path \Device\HarddiskVolume9\Windows\System32\spoolsv.exe, User S-1-5-18 

Event[14910]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:37.7430000Z
  Event ID: 7030
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Printer Extensions and Notifications service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. 

Event[14911]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:37.7430000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Printer Extensions and Notifications
Service File Name:  %SystemRoot%\system32\svchost.exe -k print
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14912]
  Log Name: System
  Source: Microsoft-Windows-DistributedCOM
  Date: 2024-01-07T14:09:37.4820000Z
  Event ID: 10010
  Task: N/A
  Level: Error 
  Opcode: Info  

  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The server {A47979D2-C419-11D9-A5B4-001185AD2B89} did not register with DCOM within the required timeout. 

Event[14913]
  Log Name: System
  Source: User32
  Date: 2024-01-07T14:09:32.5930000Z
  Event ID: 1074
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The process C:\WINDOWS\system32\winlogon.exe (PC-MAIN) has initiated the restart of computer PC-MAIN on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned)
 Reason Code: 0x80020003
 Shut-down Type: restart
 Comment:  

Event[14914]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5920000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ZOOM L12 Audio Service
Service File Name:  \SystemRoot\system32\drivers\zml12audio.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14915]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5920000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  zml12service
Service File Name:  "C:\Program Files\ZOOM\L-12 Driver\zml12service.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14916]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5910000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Visual Studio Standard Collector Service 150
Service File Name:  "C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14917]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5910000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Visual Studio Installer Elevation Service
Service File Name:  "C:\Program Files (x86)\Microsoft Visual Studio\Installer\VSInstallerElevationService.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14918]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5900000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  VirtualBox USB Monitor Service
Service File Name:  \SystemRoot\system32\DRIVERS\VBoxUSBMon.sys
Service Type:  kernel mode driver
Service Start Type:  system start
Service Account:   

Event[14919]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5890000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  VirtualBox Service
Service File Name:  \SystemRoot\system32\DRIVERS\VBoxSup.sys
Service Type:  kernel mode driver
Service Start Type:  system start
Service Account:   

Event[14920]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5890000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  VirtualBox system service
Service File Name:  "C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14921]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5880000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  TeraCopy Service
Service File Name:  "C:\Program Files\TeraCopy\TeraCopyService.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14922]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5870000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Steam Client Service
Service File Name:  "C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14923]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5870000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ROG Live Service
Service File Name:  "C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14924]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5860000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Private Internet Access WireGuard Tunnel
Service File Name:  "C:\Program Files\Private Internet Access\pia-wgservice.exe" "C:\Program Files\Private Internet Access\data\wgpia0.conf"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14925]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5850000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Private Internet Access Service
Service File Name:  "C:\Program Files\Private Internet Access\pia-service.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14926]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5850000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Plex Update Service
Service File Name:  C:\Program Files\Plex\Plex Media Server\Plex Update Service.exe
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14927]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5840000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logi Options+
Service File Name:  "C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe" --run-as-service
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14928]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5840000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  NVIDIA LocalSystem Container
Service File Name:  "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14929]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5830000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  MSIO
Service File Name:  \??\C:\WINDOWS\system32\drivers\MsIo64.sys
Service Type:  kernel mode driver
Service Start Type:  system start
Service Account:   

Event[14930]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5820000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Mozilla Maintenance Service
Service File Name:  "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14931]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5820000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Microsoft Edge Elevation Service (MicrosoftEdgeElevationService)
Service File Name:  "C:\Program Files (x86)\Microsoft\Edge\Application\120.0.2210.121\elevation_service.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14932]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5810000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ASUS AURA SYNC lighting service
Service File Name:  "C:\Program Files (x86)\LightingService\LightingService.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14933]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5800000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  LGHUB Updater Service
Service File Name:  "C:\Program Files\LGHUB\lghub_updater.exe" --run-as-service
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14934]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5800000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logitech Bluetooth Service
Service File Name:  "C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14935]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5790000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IOMap
Service File Name:  \??\C:\WINDOWS\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  disabled
Service Account:   

Event[14936]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5790000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Google Update Service (gupdatem)
Service File Name:  "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14937]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5780000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Google Update Service (gupdate)
Service File Name:  "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14938]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5770000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Google Chrome Elevation Service (GoogleChromeElevationService)
Service File Name:  "C:\Program Files\Google\Chrome\Application\120.0.6099.131\elevation_service.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14939]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5770000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  GameSDK Service
Service File Name:  "C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14940]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5760000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  NVIDIA FrameView SDK service
Service File Name:  "C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe" -service
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14941]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5750000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  FlexNet Licensing Service
Service File Name:  "C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14942]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5750000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Everything
Service File Name:  "C:\Program Files\Everything\Everything.exe" -svc
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14943]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5740000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  EUEDKEPM
Service File Name:  \??\C:\WINDOWS\system32\drivers\EUEDKEPM.sys
Service Type:  kernel mode driver
Service Start Type:  system start
Service Account:   

Event[14944]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5740000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  EUDCPEPM
Service File Name:  \SystemRoot\system32\drivers\EUDCPEPM.sys
Service Type:  kernel mode driver
Service Start Type:  boot start
Service Account:   

Event[14945]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5730000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  EPMVssEaseusProvider
Service File Name:  C:\WINDOWS\system32\dllhost.exe /Processid:{D2247493-F7EE-4104-82CE-2E7E7F46CE33}
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14946]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5730000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  EPMVolFl
Service File Name:  \SystemRoot\\SystemRoot\System32\drivers\EPMVolFl.sys
Service Type:  kernel mode driver
Service Start Type:  boot start
Service Account:   

Event[14947]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5720000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  epmdkdrv
Service File Name:  \SystemRoot\system32\epmdkdrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14948]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5710000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Epic Online Services
Service File Name:  "C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14949]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5700000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ebrntdrv
Service File Name:  \SystemRoot\system32\ebrntdrv.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14950]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5690000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Easy Anti-Cheat (Epic Online Services)
Service File Name:  "C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14951]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5690000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  EasyAntiCheat
Service File Name:  "C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe"
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14952]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5680000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  EaseUS UPDATE SERVICE
Service File Name:  C:\Program Files (x86)\EaseUS\ENS\ensserver.exe
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14953]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5680000Z
  Event ID: 7030
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The EABackgroundService service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. 

Event[14954]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5680000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  EABackgroundService
Service File Name:  C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14955]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5670000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  CTIAIO
Service File Name:  \??\C:\WINDOWS\system32\drivers\CtiAIo64.sys
Service Type:  kernel mode driver
Service Start Type:  system start
Service Account:   

Event[14956]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5670000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Bome Virtual MIDI Port
Service File Name:  \SystemRoot\system32\drivers\bomemidi.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14957]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5660000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Autodesk Access Service Host
Service File Name:  "C:\Program Files\Autodesk\AdODIS\V1\Setup\AdskAccessServiceHost.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14958]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5650000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ASUS Update Service (asusm)
Service File Name:  "C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe" /medsvc
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14959]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5640000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Asusgio3
Service File Name:  \??\C:\WINDOWS\system32\drivers\AsIO3.sys
Service Type:  kernel mode driver
Service Start Type:  system start
Service Account:   

Event[14960]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5640000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  AsusFanControlService
Service File Name:  "C:\Program Files (x86)\ASUS\AsusFanControlService\2.03.28\AsusFanControlService.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14961]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5630000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  AsusCertService
Service File Name:  "C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14962]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5630000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ASUS Update Service (asus)
Service File Name:  "C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe" /svc
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14963]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5620000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ASUS Com Service
Service File Name:  "C:\Program Files (x86)\ASUS\AXSP\4.02.27\atkexComSvc.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14964]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5610000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ARMOURY CRATE Service
Service File Name:  "C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14965]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5610000Z
  Event ID: 7030
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The AntiCheatExpert Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. 

Event[14966]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5610000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  AntiCheatExpert Service
Service File Name:  "C:\Program Files\AntiCheatExpert\SGuard\x64\SGuardSvc64.exe" -autorun
Service Type:  user mode service
Service Start Type:  demand start
Service Account:  LocalSystem 

Event[14967]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5600000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  AdskNLM
Service File Name:  "C:\Program Files (x86)\Common Files\Autodesk Shared\Network License Manager\lmgrd.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14968]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5590000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Autodesk Desktop Licensing Service
Service File Name:  "C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14969]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5580000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  AdobeUpdateService
Service File Name:  "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe"
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[14970]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:31.5570000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ACE-BASE
Service File Name:  \??\C:\WINDOWS\system32\drivers\ACE-BASE.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14971]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:09:10.1100000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Background Intelligent Transfer Service service was changed from demand start to auto start. 

Event[14972]
  Log Name: System
  Source: Microsoft-Windows-Setup
  Date: 2024-01-07T14:08:43.7880000Z
  Event ID: 2004
  Task: OS information 
  Level: Information o
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Successfully logged OS information 

Event[14973]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:40.4910000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  IDMWFP
Service File Name:  \SystemRoot\System32\drivers\idmwfp.sys
Service Type:  kernel mode driver
Service Start Type:  auto start
Service Account:   

Event[14974]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:40.4690000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  googledrivefs31357
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\googledrivefs31357.inf_amd64_a8bf31a168cf7d00\googledrivefs31357.sys
Service Type:  kernel mode driver
Service Start Type:  system start
Service Account:   

Event[14975]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:39.9020000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL03\A&2378BFBA&0&0002 with the following status: 0. 

Event[14976]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:39.8130000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\A&1C60BC04&0&0001 with the following status: 0. 

Event[14977]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:39.8120000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\A&1C60BC04&0&0001 with the following status: 0. 

Event[14978]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:39.8110000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LMouFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\A&1C60BC04&0&0001 with the following status: 0. 

Event[14979]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:39.8110000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL02\A&1C60BC04&0&0001 with the following status: 0. 

Event[14980]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.5180000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\A&2378BFBA&0&0001 with the following status: 0. 

Event[14981]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.5170000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service mouhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\A&2378BFBA&0&0001 with the following status: 0. 

Event[14982]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.5160000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LMouFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\A&2378BFBA&0&0001 with the following status: 0. 

Event[14983]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:38.5150000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logitech SetPoint KMDF Mouse Filter Driver
Service File Name:  \SystemRoot\system32\DRIVERS\LMouFilt.Sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14984]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.5150000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL02\A&2378BFBA&0&0001 with the following status: 0. 

Event[14985]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.3460000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL01\A&2378BFBA&0&0000 with the following status: 0. 

Event[14986]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.3450000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL01\A&2378BFBA&0&0000 with the following status: 0. 

Event[14987]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.3440000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL01\A&2378BFBA&0&0000 with the following status: 0. 

Event[14988]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.2980000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdclass for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL01\A&1C60BC04&0&0000 with the following status: 0. 

Event[14989]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.2970000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service kbdhid for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL01\A&1C60BC04&0&0000 with the following status: 0. 

Event[14990]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.2960000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006&COL01\A&1C60BC04&0&0000 with the following status: 0. 

Event[14991]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.0750000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidFilt for Device Instance ID HID\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E&COL04\A&2378BFBA&0&0003 with the following status: 0. 

Event[14992]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:38.0740000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logitech SetPoint KMDF HID Filter Driver
Service File Name:  \SystemRoot\system32\DRIVERS\LHidFilt.Sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14993]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:38.0160000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidEqd for Device Instance ID {A3535E08-EB26-49A9-8AE0-786ED1242812}\VID_046D&PID_C52B&REV_1211&MI_02&QID_4066&WI_02&CLASS_0000001E\9&126E3F4B&0&02 with the following status: 0. 

Event[14994]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:37.9750000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidEqd for Device Instance ID {A3535E08-EB26-49A9-8AE0-786ED1242812}\VID_046D&PID_C52B&REV_1211&MI_02&QID_4082&WI_01&CLASS_00000006\9&126E3F4B&0&01 with the following status: 0. 

Event[14995]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:37.9150000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LHidEqd for Device Instance ID {A3535E08-EB26-49A9-8AE0-786ED1242812}\VID_046D&PID_C52B&REV_1211&MI_02\9&126E3F4B&0&00 with the following status: 0. 

Event[14996]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:37.9120000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logitech SetPoint Unifying KMDF HID Filter
Service File Name:  \SystemRoot\system32\DRIVERS\LHidEqd.Sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14997]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:37.8590000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Virtual WiFi Miniport Service
Service File Name:  \SystemRoot\System32\drivers\vwifimp.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14998]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:37.7460000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  HECATE G2 GAMING HEADSET
Service File Name:  \SystemRoot\System32\drivers\HECATEG2.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[14999]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:37.7140000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Intel(R) Management Engine WMI Provider Registration
Service File Name:  %SystemRoot%\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[15000]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:37.6520000Z
  Event ID: 7001
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Intel(R) Dynamic Application Loader Host Interface Service service depends on the IP Helper service which failed to start because of the following error: 
The operation completed successfully. 

Event[15001]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:37.6360000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Intel(R) Dynamic Application Loader Host Interface Service
Service File Name:  %SystemRoot%\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[15002]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:37.5690000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service usbvideo for Device Instance ID USB\VID_046D&PID_082D&MI_00\8&1870E0F&0&0000 with the following status: 0. 

Event[15003]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:37.5580000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  USB Video Device (WDM)
Service File Name:  \SystemRoot\System32\Drivers\usbvideo.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15004]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:36.2750000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Microsoft Bluetooth Hands-Free Audio driver
Service File Name:  \SystemRoot\System32\drivers\BthHfAud.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15005]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:34.7060000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_046D&PID_C52B&MI_00\8&18F1706D&1&0000 with the following status: 0. 

Event[15006]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:08:32.6070000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 23 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[15007]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:08:32.6070000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 22 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[15008]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:08:32.5910000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 19 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[15009]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:08:32.5910000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 16 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[15010]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:08:32.5910000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 17 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[15011]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:08:32.5910000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 20 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[15012]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:08:32.5910000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 18 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[15013]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:08:32.5910000Z
  Event ID: 37
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The speed of processor 21 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report. 

Event[15014]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:29.3080000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_1532&PID_008A&MI_02\8&E14E24&0&0002 with the following status: 0. 

Event[15015]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:29.1480000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service BTHMODEM for Device Instance ID BTHENUM\{00001101-0000-1000-8000-00805F9B34FB}_LOCALMFG&0002\7&10491315&0&A899DC529E1E_C00000000 with the following status: 0. 

Event[15016]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:28.9150000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service BTHMODEM for Device Instance ID BTHENUM\{00001101-0000-1000-8000-00805F9B34FB}_LOCALMFG&0000\7&10491315&0&000000000000_00000000 with the following status: 0. 

Event[15017]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:28.8510000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service LEqdUsb for Device Instance ID USB\VID_046D&PID_C52B&MI_02\8&18F1706D&1&0002 with the following status: 0. 

Event[15018]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:28.8380000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logitech SetPoint Unifying KMDF USB Filter
Service File Name:  \SystemRoot\system32\DRIVERS\LEqdUsb.Sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15019]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:28.8070000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  LNonPnP
Service File Name:  C:\WINDOWS\System32\Drivers\LNonPnP.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15020]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:28.6500000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Bluetooth Device (Personal Area Network)
Service File Name:  \SystemRoot\System32\drivers\bthpan.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15021]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:28.0560000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Realtek USB Audio Driver
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\rtdusbad_asus.inf_amd64_651b8b1ec31a0f8a\RtUsbA64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15022]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:27.4920000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service NVDisplay.ContainerLocalSystem for Device Instance ID PCI\VEN_10DE&DEV_2208&SUBSYS_38961462&REV_A1\4&22F77229&0&0008 with the following status: 0. 

Event[15023]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:27.4780000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  NVIDIA Display Container LS
Service File Name:  %SystemRoot%\System32\DriverStore\FileRepository\nvmdi.inf_amd64_ed9d96ac28b0f507\Display.NvContainer\NVDisplay.Container.exe
Service Type:  user mode service
Service Start Type:  auto start
Service Account:  LocalSystem 

Event[15024]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:27.4790000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service nvlddmkm for Device Instance ID PCI\VEN_10DE&DEV_2208&SUBSYS_38961462&REV_A1\4&22F77229&0&0008 with the following status: 0. 

Event[15025]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:27.2900000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  nvlddmkm
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\nvmdi.inf_amd64_ed9d96ac28b0f507\nvlddmkm.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15026]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T14:08:20.7750000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[15027]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T14:08:19.1340000Z
  Event ID: 10001
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN Extensibility Module has successfully started.

Module Path: C:\WINDOWS\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\IntelIHVRouter12.dll
 

Event[15028]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:08:19.1030000Z
  Event ID: 7010
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[15029]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:08:19.1030000Z
  Event ID: 7012
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[15030]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:08:19.0400000Z
  Event ID: 7002
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[15031]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:08:19.0400000Z
  Event ID: 7005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[15032]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:08:19.0090000Z
  Event ID: 7027
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
N/A

Event[15033]
  Log Name: System
  Source: Netwtw12
  Date: 2024-01-07T14:08:18.9930000Z
  Event ID: 7036
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The \Device\NDMP5 service entered the Intel(R) Wi-Fi 6E AX210 160MHz state. 

Event[15034]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:18.8370000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  ___ Intel(R) Wireless Adapter Driver for Windows 10 - 64 Bit
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\netwtw6e.inf_amd64_cc3a2460c42c06f6\Netwtw12.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15035]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T14:08:17.9150000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[15036]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T14:08:17.5560000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[15037]
  Log Name: System
  Source: MEIx64
  Date: 2024-01-07T14:08:16.5240000Z
  Event ID: 2
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Management Engine Interface driver has started successfully. 

Event[15038]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:16.4460000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Intel(R) Management Engine Interface 
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\heci.inf_amd64_cf249bf95c3b8dcb\x64\TeeDriverW10x64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15039]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:16.2740000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  WSD Print Support
Service File Name:  \SystemRoot\System32\drivers\WSDPrint.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15040]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:14.9770000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Intel(R) Serial IO GPIO Driver v2
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15041]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:14.9080000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service WUDFWpdFs for Device Instance ID SWD\WPDBUSENUM\{94569361-A0F4-11EE-8938-6245B4EB6EB6}#0000000008100000 with the following status: 0. 

Event[15042]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:14.8980000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  WPD File System driver
Service File Name:  \SystemRoot\system32\DRIVERS\WUDFRd.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15043]
  Log Name: System
  Source: Microsoft-Windows-DriverFrameworks-UserMode
  Date: 2024-01-07T14:08:14.9020000Z
  Event ID: 10100
  Task: Installation or update of device drivers. 
  Level: Information  
  Opcode: Stop  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The driver package installation has succeeded. 

Event[15044]
  Log Name: System
  Source: Microsoft-Windows-DriverFrameworks-UserMode
  Date: 2024-01-07T14:08:14.9010000Z
  Event ID: 10001
  Task: Installation or update of device drivers. 
  Level: Information  
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The UMDF service WpdFs (CLSID {112de495-ac4c-46f8-b663-6a4266c53313}) was installed.  It requires framework version 2.33.0 or higher. 

Event[15045]
  Log Name: System
  Source: Microsoft-Windows-DriverFrameworks-UserMode
  Date: 2024-01-07T14:08:14.9000000Z
  Event ID: 10000
  Task: Installation or update of device drivers. 
  Level: Information  
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A driver package which uses user-mode driver framework version 2.33.0 is being installed on device SWD\WPDBUSENUM\{94569361-A0F4-11EE-8938-6245B4EB6EB6}#0000000008100000. 

Event[15046]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:14.8360000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logitech G HUB Translation Layer Driver
Service File Name:  \SystemRoot\system32\drivers\logi_joy_xlcore.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15047]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:14.8360000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Logitech G HUB Virtual Bus Enumerator Driver
Service File Name:  \SystemRoot\system32\drivers\logi_joy_bus_enum.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15048]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:14.6800000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Bome Virtual MIDI Enumerator
Service File Name:  \SystemRoot\System32\drivers\bomebus.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15049]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:14.6480000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  NVVHCI Enumerator Service
Service File Name:  \SystemRoot\System32\drivers\nvvhci.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15050]
  Log Name: System
  Source: Microsoft-Windows-WPDClassInstaller
  Date: 2024-01-07T14:08:14.9730000Z
  Event ID: 24579
  Task: Driver Post-Install Configuration 
  Level: Information I
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Autoplay registration was skipped for device %1. 

Event[15051]
  Log Name: System
  Source: Microsoft-Windows-WPDClassInstaller
  Date: 2024-01-07T14:08:14.9730000Z
  Event ID: 24577
  Task: Driver Post-Install Configuration 
  Level: Information I
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Media player and imaging program compatibility layers were successfully registered for device %1. Layer bits %2 were requested, layer bits %3 were registered. 

Event[15052]
  Log Name: System
  Source: Microsoft-Windows-WPDClassInstaller
  Date: 2024-01-07T14:08:14.9490000Z
  Event ID: 24576
  Task: Driver Installation 
  Level: Information l
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Drivers were successfully installed for device WPD Device. 

Event[15053]
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2024-01-07T14:08:09.4160000Z
  Event ID: 20003
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Driver Management has concluded the process to add Service HidUsb for Device Instance ID USB\VID_046D&PID_C548&MI_00\9&2A99499&0&0000 with the following status: 0. 

Event[15054]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:08:00.4840000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  NvModuleTracker
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15055]
  Log Name: System
  Source: VBoxNetLwf
  Date: 2024-01-07T14:07:59.8260000Z
  Event ID: 12
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The driver detected an internal driver error on \Device\VBoxNetLwf. 

Event[15056]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:59.7950000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Private Internet Access Network Adapter
Service File Name:  \SystemRoot\System32\drivers\tap-pia-0901.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15057]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:58.6630000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Microsoft Passport Container service was changed from disabled to demand start. 

Event[15058]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:58.6470000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the Microsoft Passport Container service was changed from demand start to disabled. 

Event[15059]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:07:57.4480000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[15060]
  Log Name: System
  Source: BTHUSB
  Date: 2024-01-07T14:07:56.8620000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during start-up. 

Event[15061]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:56.4170000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Intel(R) Wireless Bluetooth(R)
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\ibtusb.inf_amd64_de3755c52725f418\ibtusb.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15062]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:51.5890000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_74e28d819fb21cc3\RstMwService.exe with process id 4400 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AB9&SUBSYS_86941043&REV_11\3&11583659&0&E1.
Process command line: C:\WINDOWS\System32\DriverStore\FileRepository\iastorvd.inf_amd64_74e28d819fb21cc3\RstMwService.exe
List of affected devices:
PCI\VEN_1B21&DEV_0612&SUBSYS_858D1043&REV_02\4&23e02387&0&00E1
 

Event[15063]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:46.1420000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_74e28d819fb21cc3\RstMwService.exe with process id 4400 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC8&SUBSYS_86941043&REV_11\3&11583659&0&D0.
Process command line: C:\WINDOWS\System32\DriverStore\FileRepository\iastorvd.inf_amd64_74e28d819fb21cc3\RstMwService.exe
List of affected devices:
PCI\VEN_1D97&DEV_1602&SUBSYS_16021D97&REV_01\4&192db0a6&0&00D0
 

Event[15064]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T14:07:40.8120000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link has been established at 1Gbps full duplex.
 

Event[15065]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:40.2340000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Intel(R) Serial IO I2C Driver v2
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15066]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:40.2030000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
Service File Name:  \SystemRoot\system32\drivers\nvvad64v.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15067]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 6064 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "ROOT\SYSTEM\0002" "" "" "4179cb753" "0000000000000000" "e068"
List of affected devices:
 

Event[15068]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 6036 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "ROOT\SYSTEM\0001" "" "" "497c694cf" "0000000000000000" "e068"
List of affected devices:
 

Event[15069]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 5876 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k wsappx -p -s AppXSvc
List of affected devices:
 

Event[15070]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\AggregatorHost.exe with process id 5644 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: AggregatorHost.exe
List of affected devices:
 

Event[15071]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 5508 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
List of affected devices:
 

Event[15072]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 5480 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "ROOT\UNNAMED_DEVICE\0002" "" "" "4cd91e08b" "0000000000000000" "e068"
List of affected devices:
 

Event[15073]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 5356 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "USB\VID_046D&PID_C548&MI_00\9&2a99499&0&0000" "" "" "4cb49f177" "0000000000000000" "e068"
List of affected devices:
 

Event[15074]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 5332 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "ROOT\UNNAMED_DEVICE\0001" "" "" "44dbbbe0b" "0000000000000000" "e068"
List of affected devices:
 

Event[15075]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 5284 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "PCI\VEN_8086&DEV_7ACD&SUBSYS_86941043&REV_11\3&11583659&0&A9" "" "" "4f2f25faf" "0000000000000000" "e068"
List of affected devices:
 

Event[15076]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 5260 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "ROOT\NET\0000" "" "" "4166b36a7" "0000000000000000" "e068"
List of affected devices:
 

Event[15077]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 5236 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "USB\VID_8087&PID_0032\5&2cf64626&0&14" "" "" "4966d6373" "0000000000000000" "e068"
List of affected devices:
 

Event[15078]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\dasHost.exe with process id 5192 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: dashost.exe {3102e636-073c-493c-948420d6abfa8742}
List of affected devices:
 

Event[15079]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 5160 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "PCI\VEN_8086&DEV_7AB9&SUBSYS_86941043&REV_11\3&11583659&0&E1" "" "" "478901547" "0000000000000000" "e068"
List of affected devices:
 

Event[15080]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 5104 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "PCI\VEN_8086&DEV_7AA7&SUBSYS_86941043&REV_11\3&11583659&0&A2" "" "" "4b729ad3b" "0000000000000000" "e068"
List of affected devices:
 

Event[15081]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 5080 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8" "" "" "4b6519cb3" "0000000000000000" "e068"
List of affected devices:
 

Event[15082]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 4976 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "PCI\VEN_8086&DEV_7ABA&SUBSYS_86941043&REV_11\3&11583659&0&E2" "" "" "48d3a6a7f" "0000000000000000" "e068"
List of affected devices:
 

Event[15083]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 4964 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "PCI\VEN_8086&DEV_7ACE&SUBSYS_86941043&REV_11\3&11583659&0&AA" "" "" "4643dfa0f" "0000000000000000" "e068"
List of affected devices:
 

Event[15084]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 4948 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "PCI\VEN_8086&DEV_7AC8&SUBSYS_86941043&REV_11\3&11583659&0&D0" "" "" "4820aa207" "0000000000000000" "e068"
List of affected devices:
 

Event[15085]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe with process id 4880 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c
List of affected devices:
 

Event[15086]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe with process id 4744 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource windowsupdate_zdp /critical
List of affected devices:
 

Event[15087]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4696 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s LanmanServer
List of affected devices:
 

Event[15088]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\dasHost.exe with process id 4656 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: dashost.exe {7030ae88-bc7f-4068-b8d86c66e824b804}
List of affected devices:
 

Event[15089]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_74e28d819fb21cc3\RstMwService.exe with process id 4400 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\DriverStore\FileRepository\iastorvd.inf_amd64_74e28d819fb21cc3\RstMwService.exe
List of affected devices:
 

Event[15090]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4348 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks
List of affected devices:
 

Event[15091]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4336 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k utcsvc -p
List of affected devices:
 

Event[15092]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4328 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k appmodel -p -s StateRepository
List of affected devices:
 

Event[15093]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4320 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UserManager
List of affected devices:
 

Event[15094]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4304 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
List of affected devices:
 

Event[15095]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4296 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k NetworkService -p
List of affected devices:
 

Event[15096]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4288 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS
List of affected devices:
 

Event[15097]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\AsusUpdateCheck.exe with process id 4268 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\AsusUpdateCheck.exe
List of affected devices:
 

Event[15098]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4168 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
List of affected devices:
 

Event[15099]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\spoolsv.exe with process id 4144 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\spoolsv.exe
List of affected devices:
 

Event[15100]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4084 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalService -p
List of affected devices:
 

Event[15101]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4036 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s FontCache
List of affected devices:
 

Event[15102]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 4028 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder
List of affected devices:
 

Event[15103]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3984 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s SENS
List of affected devices:
 

Event[15104]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\servicing\TrustedInstaller.exe with process id 3800 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\servicing\TrustedInstaller.exe
List of affected devices:
 

Event[15105]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3776 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain
List of affected devices:
 

Event[15106]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3768 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s EventSystem
List of affected devices:
 

Event[15107]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3760 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s Themes
List of affected devices:
 

Event[15108]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3752 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s gpsvc
List of affected devices:
 

Event[15109]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3744 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k UserProfileService -p -s ProfSvc
List of affected devices:
 

Event[15110]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3684 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog
List of affected devices:
 

Event[15111]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3676 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc
List of affected devices:
 

Event[15112]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 3616 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "ROOT\UNNAMED_DEVICE\0000" "" "" "4cde59b8b" "0000000000000000" "e068"
List of affected devices:
 

Event[15113]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3608 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
List of affected devices:
 

Event[15114]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3596 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum
List of affected devices:
 

Event[15115]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3540 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hidserv
List of affected devices:
 

Event[15116]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 3516 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s DsmSvc
List of affected devices:
 

Event[15117]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\oobe\Setup.exe with process id 3412 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\oobe\setup.exe
List of affected devices:
 

Event[15118]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\wbem\WmiPrvSE.exe with process id 2640 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\wbem\wmiprvse.exe
List of affected devices:
 

Event[15119]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 2572 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s Winmgmt
List of affected devices:
 

Event[15120]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 2500 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
List of affected devices:
 

Event[15121]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\$WINDOWS.~BT\Sources\SetupPlatform.exe with process id 2420 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\$WINDOWS.~BT\Sources\SetupPlatform.exe /communication
List of affected devices:
 

Event[15122]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 2408 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
List of affected devices:
 

Event[15123]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 2404 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TextInputManagementService
List of affected devices:
 

Event[15124]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\oobe\windeploy.exe with process id 2372 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: oobe\windeploy.exe
List of affected devices:
 

Event[15125]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 2172 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k wsappx -p -s ClipSVC
List of affected devices:
 

Event[15126]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1956 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
List of affected devices:
 

Event[15127]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1876 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k NetworkService -p
List of affected devices:
 

Event[15128]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1824 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
List of affected devices:
 

Event[15129]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1788 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp
List of affected devices:
 

Event[15130]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1716 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
List of affected devices:
 

Event[15131]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1668 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s nsi
List of affected devices:
 

Event[15132]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1664 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
List of affected devices:
 

Event[15133]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\dwm.exe with process id 1612 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: "dwm.exe"
List of affected devices:
 

Event[15134]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1584 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s NetSetupSvc
List of affected devices:
 

Event[15135]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1548 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
List of affected devices:
 

Event[15136]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\sppsvc.exe with process id 1500 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\sppsvc.exe
List of affected devices:
 

Event[15137]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1460 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p -s LSM
List of affected devices:
 

Event[15138]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1416 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k RPCSS -p
List of affected devices:
 

Event[15139]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\fontdrvhost.exe with process id 1316 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: "fontdrvhost.exe"
List of affected devices:
 

Event[15140]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\fontdrvhost.exe with process id 1308 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: "fontdrvhost.exe"
List of affected devices:
 

Event[15141]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1280 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
List of affected devices:
 

Event[15142]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe with process id 1252 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODEuNSIgc2hlbGxfdmVyc2lvbj0iMS4zLjE0Ny4zNyIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9IntFNUM3QkFCRC05ODQ1LTQ3MjctQkVDOS01NjkzNzMyNkM4OTJ9IiB1c2VyaWQ9IntENjYxMkZENS0zOTM0LTRBRDctQjlGNi1BNTBEOTVFMDJBNTh9IiByZXF1ZXN0aWQ9IntEQTBBNzdDMC1ENzg0LTRCNzAtOTU5Ny0yRkNGRDE1MEQ5OUJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iMjQiIHBoeXNtZW1vcnk9IjY0IiBkaXNrX3R5cGU9IjIiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMjI2MjEuMjg2MSIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBvc19yZWdpb25fbmFtZT0iR0IiIG9zX3JlZ2lvbl9uYXRpb249IjI0MiIgb3NfcmVnaW9uX2RtYT0iMCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iQVNVUyIgcHJvZHVjdF9uYW1lPSJTeXN0ZW0gUHJvZHVjdCBOYW1lIi8-PGV4cCBldGFnPSImcXVvdDtxV0pTeld3UGZkY0xSK1hHSXY2eHJaZmlZT3hoUFUyczFOV21qV2NhRlBnPSZxdW90OyIvPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSIxMjAuMC4yMjEwLjEyMSIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGNvaG9ydD0icnJmQDAuNjUiPjxldmVudCBldmVudHR5cGU9IjQwIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIzIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIyNzY2MDIyODUiLz48L2FwcD48L3JlcXVlc3Q-
List of affected devices:
 

Event[15143]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\svchost.exe with process id 1168 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc
List of affected devices:
 

Event[15144]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\lsass.exe with process id 1152 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\lsass.exe -setup
List of affected devices:
 

Event[15145]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\drvinst.exe with process id 1148 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: DrvInst.exe "1" "20" "USB\VID_046D&PID_082D\458E74DF" "" "" "4eb535823" "0000000000000000" "e068"
List of affected devices:
 

Event[15146]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\services.exe with process id 1128 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: C:\WINDOWS\system32\services.exe -setup
List of affected devices:
 

Event[15147]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\winlogon.exe with process id 1084 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: winlogon.exe
List of affected devices:
 

Event[15148]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\wininit.exe with process id 992 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: wininit.exe
List of affected devices:
 

Event[15149]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\csrss.exe with process id 984 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
List of affected devices:
 

Event[15150]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\smss.exe with process id 796 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: \SystemRoot\System32\smss.exe
List of affected devices:
 

Event[15151]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application \Device\HarddiskVolume9\Windows\System32\csrss.exe with process id 288 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
List of affected devices:
 

Event[15152]
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2024-01-07T14:07:39.8460000Z
  Event ID: 225
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The application System with process id 4 stopped the removal or ejection for the device PCI\VEN_8086&DEV_7AC4&SUBSYS_86941043&REV_11\3&11583659&0&D8.
Process command line: 
List of affected devices:
STORAGE\Volume\{dde109c9-a597-11ee-893b-806e6f6e6963}#0000000000100000
STORAGE\Volume\{dde109c9-a597-11ee-893b-806e6f6e6963}#0000000007500000
STORAGE\Volume\{dde109c9-a597-11ee-893b-806e6f6e6963}#000000EE49E00000
 

Event[15153]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:38.6860000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Usb Software Root
Service File Name:  \SystemRoot\System32\drivers\FocusriteusbSwRoot.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15154]
  Log Name: System
  Source: e2fexpress
  Date: 2024-01-07T14:07:38.4190000Z
  Event ID: 27
  Task: N/A
  Level: Warning 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Intel(R) Ethernet Controller (3) I225-V
 Network link is disconnected.
 

Event[15155]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:38.2160000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Xbox Wireless Adapter for Windows
Service File Name:  \SystemRoot\System32\drivers\mt7612US.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15156]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:38.1540000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Intel(R) PCI Express Network Connection Driver R
Service File Name:  \SystemRoot\System32\DriverStore\FileRepository\e2f.inf_amd64_bf51b653ec31b8ab\e2f.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15157]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:38.0600000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  Service for NVIDIA High Definition Audio Driver
Service File Name:  \SystemRoot\system32\drivers\nvhda64v.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:   

Event[15158]
  Log Name: System
  Source: TPM
  Date: 2024-01-07T14:07:37.5290000Z
  Event ID: 18
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
This event triggers the Trusted Platform Module (TPM) provisioning/status check to run. 

Event[15159]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:37.5270000Z
  Event ID: 7026
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The following boot-start or system-start driver(s) did not load: 
CSC
dam 

Event[15160]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:37.4650000Z
  Event ID: 7023
  Task: N/A
  Level: Error 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The netprofm service terminated with the following error: 
The device is not ready. 

Event[15161]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10243/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15162]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:10245/WMPNSSv4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15163]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10247/apps/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15164]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15165]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:3387/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15166]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:3392/rdp/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15167]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:10246/MDEServer/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15168]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15169]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15170]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15171]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:2869/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15172]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:5985/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15173]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:47001/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15174]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://+:5986/wsman/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15175]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL https://*:5358/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15176]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://+:80/Temporary_Listen_Addresses/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15177]
  Log Name: System
  Source: Microsoft-Windows-HttpService
  Date: 2024-01-07T14:07:37.3790000Z
  Event ID: 112
  Task: HTTP Setup Trace Task 
  Level: Information r
  Opcode: ResvUrlV2  
  Keyword: Flagged on all HTTP events dealing with service setup, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Attempted to reserve URL http://*:5357/. Status 0x0. Process Id 0x4 Executable path , User S-1-5-18 

Event[15178]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:37.2620000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bindflt' (10.0, ?2032?-?10?-?20T01:22:30.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15179]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:37.2600000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'storqosflt' (10.0, ?2039?-?04?-?22T01:36:38.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15180]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:37.2570000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?2060?-?03?-?21T02:17:45.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15181]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:37.2570000Z
  Event ID: 1
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (Version 10.0, ?2060?-?03?-?21T02:17:45.000000000Z) unloaded successfully. 

Event[15182]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:37.2570000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'CldFlt' (10.0, ?2060?-?03?-?21T02:17:45.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15183]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:37.2520000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'luafv' (10.0, ?2059?-?02?-?13T09:28:11.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15184]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:37.2490000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'wcifs' (10.0, ?2089?-?07?-?06T17:42:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15185]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:37.2440000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'bfs' (10.0, ?1989?-?12?-?07T10:41:03.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15186]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:07:37.2270000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 1 keys and creating 1 modified pages. 

Event[15187]
  Log Name: System
  Source: Microsoft-Windows-SetupPlatform
  Date: 2024-01-07T14:07:36.6360000Z
  Event ID: 2005
  Task: Install Windows Task 
  Level: Information o
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
New Setup information 

Event[15188]
  Log Name: System
  Source: Microsoft-Windows-WLAN-AutoConfig
  Date: 2024-01-07T14:07:28.2930000Z
  Event ID: 4000
  Task: N/A
  Level: Information 
  Opcode: Start  t
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
WLAN AutoConfig service has successfully started.
 

Event[15189]
  Log Name: System
  Source: Microsoft-Windows-DHCPv6-Client
  Date: 2024-01-07T14:07:28.1940000Z
  Event ID: 51046
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv6 client service is started 

Event[15190]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:07:28.1890000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[15191]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:07:28.1890000Z
  Event ID: 50103
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceShutdown  
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client registered for shutdown notification 

Event[15192]
  Log Name: System
  Source: Microsoft-Windows-Dhcp-Client
  Date: 2024-01-07T14:07:28.1890000Z
  Event ID: 50036
  Task: Service State Event 
  Level: Information e
  Opcode: ServiceStart  

  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: PC-Main
  Description: 
DHCPv4 client service is started 

Event[15193]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:27.9440000Z
  Event ID: 7040
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The start type of the WlanSvc service was changed from demand start to auto start. 

Event[15194]
  Log Name: System
  Source: Service Control Manager
  Date: 2024-01-07T14:07:27.9280000Z
  Event ID: 7045
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A service was installed in the system.

Service Name:  VirtualBox NDIS6 Bridged Networking Service
Service File Name:  \SystemRoot\system32\DRIVERS\VBoxNetLwf.sys
Service Type:  kernel mode driver
Service Start Type:  system start
Service Account:   

Event[15195]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-07T14:07:27.4000000Z
  Event ID: 16983
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The security account manager is now logging periodic summary events for remote clients that call legacy password change or set RPC methods.

For more information please see https://go.microsoft.com/fwlink/?linkid=2150956.
 

Event[15196]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-07T14:07:27.4000000Z
  Event ID: 16977
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The domain is configured with the following minimum password length-related settings.

MinimumPasswordLength: 0

RelaxMinimumPasswordLengthLimits: 0

MinimumPasswordLengthAudit: -1

For more information see https://go.microsoft.com/fwlink/?LinkId=2097191.
 

Event[15197]
  Log Name: System
  Source: Microsoft-Windows-Directory-Services-SAM
  Date: 2024-01-07T14:07:27.3940000Z
  Event ID: 16962
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA).
For more information please see http://go.microsoft.com/fwlink/?LinkId=787651. 

Event[15198]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3890000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[15199]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3890000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: sfapm 

Event[15200]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3850000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: schannel 

Event[15201]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3820000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: wdigest 

Event[15202]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3710000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: cloudap 

Event[15203]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3690000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: pku2u 

Event[15204]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3670000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: tspkg 

Event[15205]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3610000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: msv1_0 

Event[15206]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3520000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: kerberos 

Event[15207]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3480000Z
  Event ID: 6155
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard.

PackageName: negoexts 

Event[15208]
  Log Name: System
  Source: LsaSrv
  Date: 2024-01-07T14:07:27.3380000Z
  Event ID: 6156
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualisation Based Security for Credential Guard auto enablement status.

Hardware Requirements:	1
Domain Joined:	0
Azure AD Joined:	0 

Event[15209]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-07T14:07:27.3160000Z
  Event ID: 15
  Task: N/A
  Level: Warning 
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard and/or VBS Key Isolation are configured but the secure kernel is not running; continuing without them. 

Event[15210]
  Log Name: System
  Source: Microsoft-Windows-Wininit
  Date: 2024-01-07T14:07:27.3160000Z
  Event ID: 14
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Credential Guard configuration:

Registry Configuration: 0x2
Test Configuration: 0
Auto Enablement: 1 

Event[15211]
  Log Name: System
  Source: Microsoft-Windows-Subsys-SMSS
  Date: 2024-01-07T14:07:27.1700000Z
  Event ID: 17
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A platform binary was successfully executed. 

Event[15212]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:07:27.1150000Z
  Event ID: 24
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The time zone information was refreshed with exit reason 0. Current time zone bias is 0. 

Event[15213]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:07:26.7210000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume H: (\Device\HarddiskVolume6) is healthy.  No action is needed. 

Event[15214]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:07:26.4780000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume F: (\Device\HarddiskVolume4) is healthy.  No action is needed. 

Event[15215]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:07:25.4680000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume E: (\Device\HarddiskVolume12) is healthy.  No action is needed. 

Event[15216]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:07:24.1960000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume \\?\Volume{3cc7b753-8ba9-4fba-aa3f-e60e3a913084} (\Device\HarddiskVolume10) is healthy.  No action is needed. 

Event[15217]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:07:24.0110000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume D: (\Device\HarddiskVolume2) is healthy.  No action is needed. 

Event[15218]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4490000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 23 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[15219]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4480000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 22 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[15220]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4460000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 21 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[15221]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4450000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 20 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[15222]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4390000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 19 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[15223]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 18 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[15224]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4380000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 17 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[15225]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4370000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 16 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 796
Minimum performance percentage: 34
Minimum throttle percentage: 3 

Event[15226]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4310000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 15 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15227]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4300000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 14 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15228]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4260000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 13 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15229]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4250000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 12 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15230]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4240000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 11 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15231]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4230000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 10 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15232]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4220000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 9 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15233]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4210000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 8 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15234]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4200000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 7 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15235]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4190000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 6 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15236]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 5 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15237]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4180000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 4 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15238]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4150000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 3 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15239]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4140000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 2 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15240]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4130000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 1 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 35
Minimum throttle percentage: 2 

Event[15241]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2024-01-07T14:07:21.4010000Z
  Event ID: 55
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Processor 0 in group 0 exposes the following power management capabilities:

Idle state type: ACPI Idle (C) States (3 state(s))

Performance state type: ACPI Collaborative Processor Performance Control
Nominal Frequency (MHz): 3200
Maximum performance percentage: 637
Minimum performance percentage: 27
Minimum throttle percentage: 2 

Event[15242]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T14:07:21.2840000Z
  Event ID: 172
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Connectivity state in standby: Disconnected, Reason: NIC compliance 

Event[15243]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2024-01-07T14:07:21.2730000Z
  Event ID: 125
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
ACPI thermal zone \_TZ.TZ00 has been enumerated.             
_PSV = 0K             
_TC1 = 0             
_TC2 = 0             
_TSP = 0ms             
_AC0 = 353K             
_AC1 = 328K             
_AC2 = 323K             
_AC3 = 318K             
_AC4 = 313K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 378K             
_HOT = 0K             
minimum throttle = 0             
_CR3 = 0K 

Event[15244]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:21.2560000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'npsvctrig' (10.0, ?1979?-?12?-?19T16:12:41.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15245]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:21.1690000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileCrypt' (10.0, ?1983?-?08?-?19T02:58:35.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15246]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-01-07T14:07:17.9830000Z
  Event ID: 98
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Volume C: (\Device\HarddiskVolume9) is healthy.  No action is needed. 

Event[15247]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:12.7070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'Wof' (10.0, ?2086?-?08?-?04T11:20:16.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15248]
  Log Name: System
  Source: Microsoft-Windows-FilterManager
  Date: 2024-01-07T14:07:12.7070000Z
  Event ID: 6
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
File System Filter 'FileInfo' (10.0, ?2079?-?02?-?26T22:03:00.000000000Z) has successfully loaded and registered with Filter Manager. 

Event[15249]
  Log Name: System
  Source: Microsoft-Windows-HAL
  Date: 2024-01-07T14:07:10.8330000Z
  Event ID: 16
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The iommu fault reporting has been initialized. 

Event[15250]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:07:10.7860000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: Time, a
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The leap second configuration has been updated.
Reason: Leap second data initialized from registry during boot
Leap seconds enabled: true
New leap second count: 0
Old leap second count: 0 

Event[15251]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:07:10.7780000Z
  Event ID: 30
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The firmware reported boot metrics. 

Event[15252]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:07:10.7780000Z
  Event ID: 27
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot type was 0x0. 

Event[15253]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:07:10.7780000Z
  Event ID: 25
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The boot menu policy was 0x1. 

Event[15254]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:07:10.7780000Z
  Event ID: 238
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
EFI time zone bias: 2047. Daylight flags: 0. Firmware time: ?2024?-?01?-?07T14:07:09.000000000Z. 

Event[15255]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:07:10.7780000Z
  Event ID: 20
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The last shutdown's success status was true. The last boot's success status was true. 

Event[15256]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:07:10.7780000Z
  Event ID: 32
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The bootmgr spent 0 ms waiting for user input. 

Event[15257]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:07:10.7780000Z
  Event ID: 26
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
A one-time boot sequence was used during this boot. 

Event[15258]
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2024-01-07T14:07:10.7780000Z
  Event ID: 153
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
Virtualization-based security (policies: 0) is disabled. 

Event[15259]
  Log Name: System
  Source: Microsoft-Windows-Kernel-General
  Date: 2024-01-07T14:07:10.7780000Z
  Event ID: 12
  Task: N/A
  Level: Information 
  Opcode: Info  a
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: PC-Main
  Description: 
The operating system started at system time ?2024?-?01?-?07T14:07:10.500000000Z. 

Event[15260]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T14:07:37.2880000Z
  Event ID: 6005
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
The Event log service was started. 

Event[15261]
  Log Name: System
  Source: EventLog
  Date: 2024-01-07T14:07:37.2880000Z
  Event ID: 6009
  Task: N/A
  Level: Information 
  Opcode: N/A
  Keyword: Classic, 
  User: N/A
  User Name: N/A
  Computer: PC-Main
  Description: 
Microsoft (R) Windows (R) 10.00. 22621  Multiprocessor Free. 

